[Freeipa-devel] Correct firewall ports for multi-master replicas

[Petr Spacek]

On 12.7.2014 08:40, James wrote:
> Hi freeipa-devel,
>
> I just added automatic firewalling for puppet-ipa. (Disclaimer it's
> currently untested...)
>
> What I'm missing is an exact and exhaustive list of exactly which ports
> each replica needs open for each other replica. I'm hoping that this
> list is symmetrical.

AFAIK ipa-replica-conncheck utility and ipa-server-install script should show 
list of required ports.

-- 
Petr^2 Spacek