[Freeipa-devel] [PATCH] 205 Remove UDP checks from conncheck

Martin Kosek mkosek at redhat.com
Wed Feb 1 16:55:07 UTC 2012


UDP port checks in ipa-replica-conncheck always returns OK even
if they are closed by firewall. They cannot be reliably checked
in the same way as TCP ports as there is no session management as
in TCP protocol. We cannot guarantee a response on the checked
side without our own echo server bound to checked port.

This patch removes UDP port checks altogether so that user gets
a consistent conncheck report without confusing UDP results.

https://fedorahosted.org/freeipa/ticket/2062

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-205-remove-udp-checks-from-conncheck.patch
Type: text/x-patch
Size: 4280 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120201/ef7acb0f/attachment.bin>


More information about the Freeipa-devel mailing list