[Freeipa-users] Does FreeIPA require ICMP to be allowed? Can it cause login speed issues?

[Jake]

Hey Guys, 
Can anyone tell me if there are issues caused by blocking ICMP requests between ipa clients, ipa servers and ad servers? 

We typically filter ICMP between all systems. 

Also, if anyone has good documentation as to what ports are required between each I'd really appreciate it! 

>From IPA Server to AD Server (trust) 
>From IPA Client to IPA Server 
>From IPA Client to AD Server (if any, unsure if kerberos/ldap is needed here or not on v4) 
>From AD Client to IPA Client (ad users on windows machines accessing ipa client over ssh with kerberos gssapi) 

Thanks! Have a good weekend! 

-Jake 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160812/cedf27bf/attachment.htm>