[Samba] Unable to join domain when DC firewall is active

[Rob Campbell]

I'm unable to join my computer to the domain.

On the domain controller, initially I only had firewall-cmd --permanent
--add-service=samba but that didn't work. The computer couldn't join but
when I turned off the firewall all-together I was able to join.

I then tried firewall-cmd --permanent
--add-service={samba,dns,ldap,ldaps,kerberos,kpasswd} but that didn't work
either.

Are there some other services and/or ports I need to open?

I've also tried firewall-cmd --permanent --add-port={137,138,139,445}/tcp
and firewall-cmd --permanent --add-port={137,138,139,445}/udp just to see
if it would work but it didn't.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.