I posted on the GitHub issue, but I'll TL;DR it here for future searchers: I recommended setting the `module` parameter to `netbios-ns` which is in line with how RedHat recommended fixing the underlying firewall issue. It's probably just a case of differences between RHEL 7 and RHEL 8, and the documentation not perfectly reflecting that.
On Monday, March 14, 2022 at 2:20:56 PM UTC-4 nasa_dan wrote: > I used this is a RHEL 7 PuppetServer without problem: > > firewalld::custom_services: > 'pe-puppetserver': > short: 'Puppet Enterprise Server' > description: 'Puppet is a network tool for managing many disparate > systems. Puppet Master is a server which Puppet Agents pull their > configurations from.' > port: > - port: 4433 > protocol: 'tcp' > - port: 5432 > protocol: 'tcp' > - port: 8081 > protocol: 'tcp' > - port: 8170 > protocol: 'tcp' > module: > - 'nf_conntrack_netbios_ns' > > but on RHEL 8.5, it does this: > > [1] 2022-03-11 18:00:30 DEBUG1: Traceback (most recent call last): > > File "/usr/lib/python3.6/site-packages/firewall/core/fwpolicy.py", > line 717, in get_helpers_for_service_modules > > helper = self.fw.helper.gethelper(module) > > File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", > line 56, in get_helper > > self.checkhelper(name) > > File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", > line 44, in check_helper > > raise FirewallError(errors.INVALIDHELPER, name) > > firewall.errors.FirewallError: INVALID_HELPER: netbios_ns > > > > I filed an issue > <https://github.com/voxpupuli/puppet-firewalld/issues/319> on GitHub. > > Removing the module parameter fixed the problem, however, I realized that > I just copied from the modules code samples. > > What does this parameter do ? > > If I need it, how do I use it in RHEL 8 ? > > > *______________________________________________________________________________________________* > > > > *Daniel E. White* > *daniel....@nasa.gov* > > > > > *NASCOM Linux Engineer NASA Goddard Space Flight Center Science > Applications International Corporation (SAIC) Office: (301) 286-6919 > <(301)%20286-6919>* > > *Mobile: (240) 513-5290 <(240)%20513-5290>* > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/3aee7b0c-040b-400b-b0be-319d99139b39n%40googlegroups.com.
