#2 ldap in iptables

DICE-UNC · Mar 4, 2016 · 212b1a3 · 212b1a3
1 parent e12c885
commit 212b1a3
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/ansible/roles/iptables/templates/iptables.j2 b/ansible/roles/iptables/templates/iptables.j2
@@ -176,6 +176,11 @@
 -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.wifi }} --dport 443 -j ACCEPT
 {% endif %}
 
+{% if inventory_hostname in groups['ldap'] %}
+-A INPUT -m state --state NEW -m tcp -p tcp -s 172.0.0.0/8 --dport 389 -j ACCEPT
+-A INPUT -m state --state NEW -m tcp -p tcp -s 152.54.0.0/16 --dport 389 -j ACCEPT
+{% endif %}
+
 -A INPUT -j REJECT --reject-with icmp-host-prohibited
 -A FORWARD -j REJECT --reject-with icmp-host-prohibited
 COMMIT
diff --git a/tools/sharkbait/resources/grouper.client.properties b/tools/sharkbait/resources/grouper.client.properties
@@ -13,4 +13,4 @@
 ## LDAP connection settings
 ########################################
 
-grouperClient.config.hierarchy = classpath:grouper.client.base.properties, classpath:grouper.client.properties, file:/etc/grouper/client.properties
+grouperClient.config.hierarchy = classpath:grouper.client.base.properties, classpath:grouper.client.properties