I posted on the GitHub issue, but I'll TL;DR it here for future searchers: I recommended setting the `module` parameter to `netbios-ns` which is in line with how RedHat recommended fixing the underlying firewall issue. It's probably just a case of differences between RHEL 7 and RHEL 8, and the documentation not perfectly reflecting that.
On Monday, March 14, 2022 at 2:20:56 PM UTC-4 nasa_dan wrote: > I used this is a RHEL 7 PuppetServer without problem: > > firewalld::custom_services: > 'pe-puppetserver': > short: 'Puppet Enterprise Server' > description: 'Puppet is a network tool for managing many disparate > systems. Puppet Master is a server which Puppet Agents pull their > configurations from.' > port: > - port: 4433 > protocol: 'tcp' > - port: 5432 > protocol: 'tcp' > - port: 8081 > protocol: 'tcp' > - port: 8170 > protocol: 'tcp' > module: > - 'nf_conntrack_netbios_ns' > > but on RHEL 8.5, it does this: > > [1] 2022-03-11 18:00:30 DEBUG1: Traceback (most recent call last): > > File "/usr/lib/python3.6/site-packages/firewall/core/fwpolicy.py", > line 717, in get_helpers_for_service_modules > > helper = self.fw.helper.gethelper(module) > > File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", > line 56, in get_helper > > self.checkhelper(name) > > File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", > line 44, in check_helper > > raise FirewallError(errors.INVALIDHELPER, name) > > firewall.errors.FirewallError: INVALID_HELPER: netbios_ns > > > > I filed an issue > <https://github.com/voxpupuli/puppet-firewalld/issues/319> on GitHub. > > Removing the module parameter fixed the problem, however, I realized that > I just copied from the modules code samples. > > What does this parameter do ? > > If I need it, how do I use it in RHEL 8 ? > > > *______________________________________________________________________________________________* > > > > *Daniel E. White* > *[email protected]* > > > > > *NASCOM Linux Engineer NASA Goddard Space Flight Center Science > Applications International Corporation (SAIC) Office: (301) 286-6919 > <(301)%20286-6919>* > > *Mobile: (240) 513-5290 <(240)%20513-5290>* > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/3aee7b0c-040b-400b-b0be-319d99139b39n%40googlegroups.com.
