Bug 1563728

== Document URL, Section Number and Name: 
10.5.2. Configuring a Quorum Device
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/high_availability_add-on_reference/s1-quorumdev-haar#s2-quorumdevconfig-HAAR

== Describe the issue: 
Following procedure for configuring Quorum device I will fail on step 
'2. From one of the nodes in the existing cluster, authenticate user hacluster on the node that is hosting the quorum device.' with error below

# pcs cluster auth qdevice
Username: hacluster
Password:
Error: Unable to communicate with qdevice

== Suggestions for improvement: 
Problem is that 'high-availability' service was not added to firewall on 'qdevice' machine. There is some information about this in 1.3. that the port 5403 is part of 'high-availability' service in firewalld and should be enabled on 'quorum device host', but that part of documentation is "too far" from this procedure.

I propose adding step before current step 2:

2. Enable ports on firewall needed by `pcsd` daemon and `net` `qdevice` by enabling 'high-availability' service on firewalld with commands below.

  [root@qdevice:~]# firewall-cmd --permanent --add-service=high-availability
  [root@qdevice:~]# firewall-cmd --add-service=high-availability

3. <former step 2.> From one of the nodes in the existing cluster, authenticate user hacluster on the node that is hosting the quorum device. ...