Request for promotion to rank of "editor"

[Dylan Boyd]

Good day, lovely folk here at FreeIPA

I'm getting started with FreeIPA, and spent the better part of an hour figuring out
why the firewalld rules "freeipa-ldap" and "freeipa-ldaps" weren't
having the desired effect.

Digging into the firewalld rule XML files, I found that they're deprecated, yet are
cited in the documentation.

Would you be so kind as to add me to the editor group such that I might correct this?

[Alexander Bokovoy]

Hello,

On su, 26 syys 2021, Dylan Boyd via FreeIPA-devel wrote:
> Good day, lovely folk here at FreeIPA
>
> I'm getting started with FreeIPA, and spent the better part of an hour
> figuring out why the firewalld rules "freeipa-ldap" and
> "freeipa-ldaps"
> weren't having the desired effect.
>
> Digging into the firewalld rule XML files, I found that they're
> deprecated, yet are cited in the documentation. 
firewalld introduced 'include' support which allows to reference other
existing rules. This does not change a resulting firewall setup, though,
because 

   <include service="ldap"/>

brings 

   <port protocol="tcp" port="389"/>

as its service definition which is the same as in the original
freeipa-ldap rule definition.

So the end result should be the same. I suspect your configuration might
have other issues than a choice of what ruleset to use.


> Would you be so kind as to add me to the editor group such that I
> might
> correct this? 
Please provide your wiki user name. Also, when editing, please make sure
both old and new rule names mentioned to account for Linux distribution
versions with older firewalld.


-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland