)]}'
{"roles/freeipa-setup/tasks/main.yml":[{"author":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"change_message_id":"1deed7c4fa97b65a5c6321a8702d351c567c74c7","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      permanent: true"},{"line_number":39,"context_line":"      state: enabled"},{"line_number":40,"context_line":"      immediate: yes"},{"line_number":41,"context_line":"    with_items:"},{"line_number":42,"context_line":"      - 80/tcp"},{"line_number":43,"context_line":"      - 443/tcp"},{"line_number":44,"context_line":"      - 389/tcp"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9fb8cfa7_b16a60ea","line":41,"updated":"2019-06-09 16:51:17.000000000","message":"I believe this list of ports used by IPA is incomplete. pki-tomcat (a.k.a. Certificate Server) is using TCP ports 8080 and 8443. These do not show up in the the list of ports output by ipa-server-install. I discovered this because by default keycloak will also attempt to use those ports.\n\nWhat I don\u0027t know is are these pki ports supposed to be publicly addressable or not or are they supposed to be used by the IPA server on the same node. However pki seems to also listen on a pair of UNIX domain sockets as well.","commit_id":"5d22be44d80d09bc580ce3b0190ce69818ffa3f6"},{"author":{"_account_id":8116,"name":"John Dennis","email":"jdennis@redhat.com","username":"jdennis"},"change_message_id":"5603ea47bed4f6ef7310ca7f50d64d5a44e7c2aa","unresolved":false,"context_lines":[{"line_number":38,"context_line":"      permanent: true"},{"line_number":39,"context_line":"      state: enabled"},{"line_number":40,"context_line":"      immediate: yes"},{"line_number":41,"context_line":"    with_items:"},{"line_number":42,"context_line":"      - 80/tcp"},{"line_number":43,"context_line":"      - 443/tcp"},{"line_number":44,"context_line":"      - 389/tcp"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9fb8cfa7_43530c40","line":41,"in_reply_to":"9fb8cfa7_b16a60ea","updated":"2019-06-10 18:29:38.000000000","message":"I checked with the IPA guys, and the pki-tomcat ports are not supposed to be open.","commit_id":"5d22be44d80d09bc580ce3b0190ce69818ffa3f6"}]}