mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
306bdccfa4
UDP port checks in ipa-replica-conncheck always returns OK even if they are closed by a firewall. They cannot be reliably checked in the same way as TCP ports as there is no session management as in TCP protocol. We cannot guarantee a response on the checked side without our own echo server bound to checked port. This patch removes UDP port checks in replica->master direction as we would have to implement (kerberos) protocol-wise check to make the other side actually respond. A list of skipped ports is printed for user. Direction master->replica was fixed and now it is able to report error when the port is blocked. https://fedorahosted.org/freeipa/ticket/2062 |
||
---|---|---|
.. | ||
man | ||
ipa-adtrust-install | ||
ipa-ca-install | ||
ipa-compat-manage | ||
ipa-compliance | ||
ipa-csreplica-manage | ||
ipa-dns-install | ||
ipa-ldap-updater | ||
ipa-managed-entries | ||
ipa-nis-manage | ||
ipa-replica-conncheck | ||
ipa-replica-install | ||
ipa-replica-manage | ||
ipa-replica-prepare | ||
ipa-server-certinstall | ||
ipa-server-install | ||
ipa-upgradeconfig | ||
ipactl | ||
Makefile.am |