2. Modify System Security - iptables about ood-documentation HOT 3 CLOSED

You pointed out that the last command we supplied broke for RHEL 7, so it was already incorrect.

My opinions below:

• Maintaining documentation that works across RHEL6, CentOS6, RHEL7, CentOS7 and the various firewall tools for opening ports 80/443 that should be second nature to a good sys admin puts an unnecessary burden on us
• We currently don't document how (but we mention these need to be done):
  • set up host name with machine's ip address
  • generate SSL certificate
  • disable SELinux
  • setup LDAP/NSS
  • mount shared file system
• We can ask Trey to enable ports 80/443 in his Puppet script when spinning up blank OOD portal VM's, then this won't be a burden on us when testing installs
• So far no installation site has asked us about setting up the firewall rules

from ood-documentation.

My 2-cents. Document the ports that need to be opened and leave it up to sysadmin to figure out how. The way people open ports probably varies from site to site.

from ood-documentation.

I removed the documentation on walking the user through iptables.

from ood-documentation.