Problems with Forge Module puppet-firewall on RHEL 8.5

[White, Daniel E. (GSFC-770.0)[NICS]]

I used this is a RHEL 7 PuppetServer without problem:

firewalld::custom_services:
  'pe-puppetserver':
    short: 'Puppet Enterprise Server'
    description: 'Puppet is a network tool for managing many disparate systems. Puppet Master is a server which Puppet Agents pull their configurations from.'
    port:
      - port: 4433
        protocol: 'tcp'
      - port: 5432
        protocol: 'tcp'
      - port: 8081
        protocol: 'tcp'
      - port: 8170
        protocol: 'tcp'
    module:
      - 'nf_conntrack_netbios_ns'

but on RHEL 8.5, it does this:

[1] 2022-03-11 18:00:30 DEBUG1: Traceback (most recent call last):

      File "/usr/lib/python3.6/site-packages/firewall/core/fwpolicy.py", line 717, in get_helpers_for_service_modules

        helper = self.fw.helper.gethelper(module)

      File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", line 56, in get_helper

        self.checkhelper(name)

      File "/usr/lib/python3.6/site-packages/firewall/core/fwhelper.py", line 44, in check_helper

        raise FirewallError(errors.INVALIDHELPER, name)

    firewall.errors.FirewallError: INVALID_HELPER: netbios_ns

 

I filed an issue on GitHub.

Removing the module parameter fixed the problem, however, I realized that I just copied from the modules code samples.

What does this parameter do ?

If I need it, how do I use it in RHEL 8 ?

______________________________________________________________________________________________

 

Daniel E. White
daniel....@nasa.gov

NASCOM Linux Engineer
NASA Goddard Space Flight Center
Science Applications International Corporation (SAIC)
Office: (301) 286-6919

Mobile: (240) 513-5290

[A Manzer]

I posted on the GitHub issue, but I'll TL;DR it here for future searchers:

I recommended setting the `module` parameter to `netbios-ns` which is in line with how RedHat recommended fixing the underlying firewall issue.  It's probably just a case of differences between RHEL 7 and RHEL 8, and the documentation not perfectly reflecting that.