-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-9.6
-
Low
-
rhel-sst-ccs
-
None
-
False
-
False
-
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
What were you trying to do that didn't work?
Install an IdM replica without port 80 being open on the target server.
What is the impact of this issue to you?
Having port 80 open is a security concern.
Please provide the package NVR for which the bug is seen:
ipa-server-4.12.2-14.el9_6.5
How reproducible is this bug?:
Always
Steps to reproduce
- Disable/block port 80 on existing IdM server. This port is not required for RHEL 8+
- Install replica using ipa-replica-install
Expected results
Installation of replica should succeed. Possibly with a warning message.
Actual results
Installation fails because target port 80 is not accessible.
Additional Information
ipa-replica-install calls ipa-replica-conncheck, and that is where the fix should be made. Port 80 is not used by RHEL 8+ for replica communication (7 and earlier do), so instead of it being an error it should be a warning at most.
The workaround is to use `ipa-replica-install --skip-conncheck` but this leads to potential error scenarios where other required ports are not accessible.