[Freeipa-users] blocking LDAP from DCs

[Alexander Bokovoy]

On Fri, 10 Apr 2015, Andy Thompson wrote:
>I am testing out trusts in my sandbox and the ipa-adtrust-install
>script notes at the end that LDAP should be blocked from the domain
>controllers.  But
>http://www.freeipa.org/page/Active_Directory_trust_setup  notes that
>it's not needed.
>
>Which recommendation is correct?
Both, considering their timeline :)

We may update ipa-adtrust-install text if it is confusing but it is
pretty low priority right now.

-- 
/ Alexander Bokovoy