Bug 1135634

Summary: [RFE] firewalld services for Satellite 6 ports
Product: Red Hat Enterprise Linux 7 Reporter: Pat Riehecky <riehecky>
Component: firewalldAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: Tomas Dolezal <todoleza>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: eminguez, jpopelka, misterbonnie, todoleza
Target Milestone: rcKeywords: FutureFeature
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: firewalld-0.3.9-8.el7 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-05 13:23:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
service file none

Description Pat Riehecky 2014-08-29 20:07:29 UTC 
Description of problem: There are a few ports which must be opened on the Satellite 6 server for correct communications.  It would be nice if firewalld was aware of these services so that the installation instructions could be more tailored to the shipped system tools. 


Version-Release number of selected component (if applicable): 	firewalld-0.3.9-7.el7


How reproducible:100%


Steps to Reproduce:
1.Review documentation provided by Satellite 6
2.look for corosponding firewalld services
3.find none

Actual results:
Need to define services by hand

Expected results:
services already defined within firewalld

Additional info:
https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.0/html/Installation_Guide/Prerequisites3.html
Comment 2 Jiri Popelka 2014-09-01 12:50:25 UTC 
Created attachment 933347 [details]
service file
Comment 4 Eduardo Minguez 2014-09-11 10:31:17 UTC 
I've tested the patch with the following process:

* Create a file called "RH-Satellite-6.xml" (the patch) in /etc/firewalld/services/ folder with the following content:

    <?xml version="1.0" encoding="utf-8"?>  
    <service>  
      <short>Red Hat Satellite 6</short>  
      <description>Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments.</description>  
      <port protocol="tcp" port="80"/>  
      <port protocol="tcp" port="443"/>  
      <port protocol="tcp" port="5671"/>  
      <port protocol="tcp" port="8140"/>  
      <port protocol="tcp" port="9090"/>  
    </service>  

* Set permissions

    restorecon /etc/firewalld/services/RH-Satellite-6.xml  
    chmod 640 /etc/firewalld/services/RH-Satellite-6.xml  

* Add the RH-Satellite-6 service to the default zone

    firewall-cmd --permanent --add-service=RH-Satellite-6  

* Reload firewalld

    firewall-cmd --reload
Comment 6 Tomas Dolezal 2014-09-11 13:54:31 UTC 
Hello Thomas,
according to https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.0/html/Installation_Guide/Prerequisites3.html rev-1-1 from Sep-10, 8080/tcp port should be open to clients.
>Port 8080 for TCP must be free for java connections.
Please include this port in the service file, thanks.
Comment 8 Tomas Dolezal 2015-01-13 18:53:37 UTC 
present in firewalld-0.3.9-11.el7.noarch
Comment 10 errata-xmlrpc 2015-03-05 13:23:27 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-0520.html