<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/27/2014 06:13 AM, Innes, Duncan
wrote:<br>
</div>
<blockquote
cite="mid:56343345B145C043AE990701E3D193950478E1E5@EXVS2.nrplc.localnet"
type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 8.00.6001.23580">
<div><span class="450345611-27102014"><font face="Arial" size="2">Hi,</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Have
been using `ping` to test connectivity from our clients to
the various IPA servers around the WAN before running an
ldapsearch to pull some details about the client from the
LDAP database.</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Several
new VLAN's have now come online that do not permit ping
traffic to be transmitted outside the VLAN, so clients on
these LAN's think they can't see any of my IPA servers and
then fail the domain join during the kickstart phase.</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Wondering
if there's a consensus on how to check connectivity to IPA
servers on the network? Something that I can use during the
kickstart post-install phase.</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Current
effort is:</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">wget
--timeout=1 --tries=1 --no-check-certificate <a
moz-do-not-send="true"
href="https://ipaserver1.example.com">https://ipaserver1.example.com</a></font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">and
then test $? for result. But this only tests ports 80/443 -
which authentication clients wont necessarily have access
on. Can I reliably test the other FreeIPA ports? 389, 636,</font></span></div>
</blockquote>
<br>
<font size="2"><font face="Arial">389: ldapsearch -xLLL -h
ipaserver1.example.com -p 389 -s base -b ""<br>
<br>
</font></font>636: <font size="2"><font face="Arial"><font
size="2"><font face="Arial">LDAPTLS_REQCERT=never ldapsearch
-xLLL -H <a class="moz-txt-link-freetext" href="ldaps://">ldaps://</a></font></font></font></font><font size="2"><font
face="Arial"><font size="2"><font face="Arial"><font size="2"><font
face="Arial">ipaserver1.example.com </font></font></font></font></font></font><font
size="2"><font face="Arial"><font size="2"><font face="Arial"><font
size="2"><font face="Arial"><font size="2"><font
face="Arial"> -s base -b ""<br>
<br>
</font></font></font></font></font></font><br>
</font></font>
<blockquote
cite="mid:56343345B145C043AE990701E3D193950478E1E5@EXVS2.nrplc.localnet"
type="cite">
<div><span class="450345611-27102014"><font face="Arial" size="2">88,
464? These are the ports that clients have to be allowed
access to the IPA servers.</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Cheers</font></span></div>
<div><span class="450345611-27102014"></span> </div>
<div><span class="450345611-27102014"><font face="Arial" size="2">Duncan</font></span></div>
<br clear="all">
This message has been checked for viruses and spam by the Virgin
Money email scanning system powered by Messagelabs.<br>
<br>
This e-mail is intended to be confidential to the recipient. If
you receive a copy in error, please inform the sender and then
delete this message.<br>
<br>
Virgin Money plc - Registered in England and Wales (Company no.
6952311). Registered office - Jubilee House, Gosforth, Newcastle
upon Tyne NE3 4PL. Virgin Money plc is authorised by the
Prudential Regulation Authority and regulated by the Financial
Conduct Authority and the Prudential Regulation Authority.<br>
<br>
The following companies also trade as Virgin Money. They are both
authorised and regulated by the Financial Conduct Authority, are
registered in England and Wales and have their registered office
at Jubilee House, Gosforth, Newcastle upon Tyne NE3 4PL: Virgin
Money Personal Financial Service Limited (Company no. 3072766) and
Virgin Money Unit Trust Managers Limited (Company no. 3000482).<br>
<br>
For further details of Virgin Money group companies please visit
our website at virginmoney.com<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>