Plugins » Katello

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1425926

Description of problem: Candlepin requires a single API call to port 8080 during initialization. This can be tricky to allow for users with firewall rules that restrict localhost traffic.

Version-Release number of selected component (if applicable): 6.2.7

Candlepin requires access to port 8080 on localhost for the installation to succeed. We can add a firewall rule for this in the docs, but it is a one-time thing that only needs to be enabled during install, and can then be disabled.

Additionally, the firewall rule would have to be crafted to not allow access from other hosts. The server.xml default will bind it to 0.0.0.0 instead of 127.0.0.1. Once the installation is complete, users have to remember to disable 8080 on localhost again.

Ideally, the initialization could occur without this one-time call to this port. Then we could just remove the 8080 listener entirely.