IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

conncheck: Fix List of ports to check

Browse Source 
We need to check all Kerberos ports both TCP and UDP transports.

Since we have the PKI proxy configuration all communication with the CA happens
on the standard 80/443 ports so we need to check them always.
We do not need to leave the old CA ports open. These ports are still used
locally but not over the network.
This commit is contained in:
Simo Sorce
2011-08-31 14:07:56 -04:00
parent 801dc97adb
commit 15cada3733
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
install/tools/ipa-replica-conncheck
View File

@@ -50,16 +50,16 @@ class CheckedPort(object):
BASE_PORTS = [
CheckedPort(389, True, "Directory Service: Unsecure port"),
CheckedPort(636, True, "Directory Service: Secure port"),
CheckedPort(88, False, "Kerberos"),
CheckedPort(88, True, "Kerberos KDC: TCP"),
CheckedPort(88, False, "Kerberos KDC: UDP"),
CheckedPort(464, True, "Kerberos Kpasswd: TCP"),
CheckedPort(464, False, "Kerberos Kpasswd: UDP"),
CheckedPort(80, True, "HTTP Server: port 80"),
CheckedPort(443, True, "HTTP Server: port 443(https)"),
]
CA_PORTS = [
CheckedPort(7389, True, "PKI-CA: Directory Service port"),
CheckedPort(9443, True, "PKI-CA: Agent secure port"),
CheckedPort(9444, True, "PKI-CA: EE secure port"),
CheckedPort(9445, True, "PKI-CA: Admin secure port"),
CheckedPort(9446, True, "PKI-CA: EE secure client auth port"),
CheckedPort(9180, True, "PKI-CA: Unsecure port"),
]
def print_info(msg):