diff options
| author | Thorsten Scherf <tscherf@redhat.com> | 2015-04-10 15:26:28 +0200 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2015-04-21 17:24:34 +0200 |
| commit | 22d3a93bbcf86a610c772added9103ffc188964e (patch) | |
| tree | eb69ebe9b120019706e6cd71283f8aa39cc19944 /install/tools/ipa-adtrust-install | |
| parent | 3d2feac0e416c66ba37eee53ef5b3833c2c3e414 (diff) | |
| download | freeipa-22d3a93bbcf86a610c772added9103ffc188964e.tar.gz freeipa-22d3a93bbcf86a610c772added9103ffc188964e.tar.xz freeipa-22d3a93bbcf86a610c772added9103ffc188964e.zip | |
Removed recommendation from ipa-adtrust-install
In the wiki we say it's not longer necessary to make the IPA LDAP server not
reachable by any AD domain controller. To be consistence, the setup tool
should reflext this statement.
https://fedorahosted.org/freeipa/ticket/4977
Reviewed-By: Gabe Alford <redhatrises@gmail.com>
Diffstat (limited to 'install/tools/ipa-adtrust-install')
| -rwxr-xr-x | install/tools/ipa-adtrust-install | 9 |
1 files changed, 0 insertions, 9 deletions
diff --git a/install/tools/ipa-adtrust-install b/install/tools/ipa-adtrust-install index 6e55bbe3e..ac1d13a13 100755 --- a/install/tools/ipa-adtrust-install +++ b/install/tools/ipa-adtrust-install @@ -429,15 +429,6 @@ You must make sure these network ports are open: \t * 389: (C)LDAP \t * 445: microsoft-ds -Additionally you have to make sure the FreeIPA LDAP server is not reachable -by any domain controller in the Active Directory domain by closing down -the following ports for these servers: -\tTCP Ports: -\t * 389, 636: LDAP/LDAPS - -You may want to choose to REJECT the network packets instead of DROPing -them to avoid timeouts on the AD domain controllers. - ============================================================================= """ if admin_password: |