1.7. Opening the ports required by IdM

Procedure

1. Verify that the firewalld service is running.

   • To find out if firewalld is currently running:

     # systemctl status firewalld.service

   • To start firewalld and configure it to start automatically when the system boots:

     # systemctl start firewalld.service
     # systemctl enable firewalld.service

2. Open the required ports using the firewall-cmd utility. Choose one of the following options:

   1. Add the individual ports to the firewall by using the firewall-cmd --add-port command. For example, to open the ports in the default zone:

      # firewall-cmd --permanent --add-port={80/tcp,443/tcp,389/tcp,636/tcp,88/tcp,88/udp,464/tcp,464/udp,53/tcp,53/udp}

   2. Add the firewalld services to the firewall by using the firewall-cmd --add-service command. For example, to open the ports in the default zone:

      # firewall-cmd --permanent --add-service={freeipa-4,dns}

      For details on using firewall-cmd to open ports on a system, see the firewall-cmd(1) man page.

3. Reload the firewall-cmd configuration to ensure that the change takes place immediately:

   # firewall-cmd --reload

   Note that reloading firewalld on a system in production can cause DNS connection time outs. If required, to avoid the risk of time outs and to make the changes persistent on the running system, use the --runtime-to-permanent option of the firewall-cmd command, for example:

   # firewall-cmd --runtime-to-permanent