Bug 61859

Summary: RFE: Handle firewall settings and selected services so they don't conflict on ports
Product: [Retired] Red Hat Linux Reporter: Telsa Gwynne <hobbit>
Component: anacondaAssignee: Michael Fulbright <msf>
Status: CLOSED WONTFIX QA Contact: Brock Organ <borgan>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.3   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-04-16 18:56:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Telsa Gwynne 2002-03-25 11:14:35 UTC
Description of Problem:

Anaconda happily let me choose both NIS for passwords and a medium firewall
without any warning that this combination won't let me login.

Version-Release number of selected component (if applicable): skipjack's anaconda

How Reproducible: will try on another box and find out. So far, one out of one.


Steps to Reproduce:
1. Install skipjack
2. Select NIS in passwords
3. Create root account: leave rest for NIS to find.
3. Select medium firewall

Actual Results:

Can login as root but not as users.

Expected Results:

Can login as all users.

Additional Information:
	
This is the first time I have touched NIS. This may be pilot error :)

Comment 1 Michael Fulbright 2002-03-25 19:54:22 UTC
lokkit doesn't really do anything that sophicated (all anaconda does is call the
lokkit program with command line args based on the 'level of security' you selected.

The documentation for that screen tries to explain the possible interactions
between the firewall setting and services, but it is not intended to be a
substitute for a true services/firewall config tool (which doesn't exist).

Something we can revisit in the future once the OS has a tool to do this better
than lokkit.


Comment 2 Michael Fulbright 2003-04-16 18:56:13 UTC
This is not a feature we are going to add to the installer.