GAURAV Pande via FreeIPA-users wrote:
Hi Team ,
New in this space , could you please let us know if Firewalld and SELinux service should
be enabled as a Pre-requisite for installation of FreeIPA server/Client ? looking forward
for your response . Thanks.
I'd again refer you to the documentation. Yes there is a lot to take in
but IPA is a complex product so being familiar with at least the
installation guide will make you more successful.
Neither are required. SELinux is strongly encouraged and IPA should work
out of the box with it. You can firewall using any mechanism you'd like
but having firewalld (or iptables or other tech) on the IPA server can
make troubleshooting easier than outsourcing it to another team to
manage, who may make changes without your knowledge.
rob