Hi, I'd like to restict which hosts have access to port 389 on the IPA server. How does SSSD connect to the IPA 2.x server for user name queries? I half expected it to need port 389 or 636 open on the server, but my testing is showing this is not the case. cya Craig