On (14/03/18 18:01), Roger Mårtensson wrote: >Hello! > >Got tasked to look at firewall rules and am now wondering if there is a >document anywhere that describes the ports and protocols used by SSSD? > >My list currently consist of: 53 (udp/tcp), 88 (udp), 389 (tcp), 636 (tcp) >and 3268 (tcp) and 3269 (tcp) > ldaps(636) needn't be allowed if you use ldap+start_tls or ldap+gssapi
You might allow also 88(tcp) for kerberos // not just udp + also 464 for kpasswd >If I search on "Windows Client" and ports I get tons of ports and port-ranges >I may need to open. But what do SSSD use? > If you use sssd with AD + GPO for access control then you might need to allow access remote ports for samba. I assume following one based on SElinux policy sh# semanage port -l | grep ^smbd_port_t smbd_port_t tcp 445, 137-139 LS _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
