# Opensearch ldaps troubles (yet again)

**URL:** <https://forum.opensearch.org/t/opensearch-ldaps-troubles-yet-again/17427>\
**Category:** Security\
**Tags:** troubleshoot, configure\
**Created:** [January 15, 2024, 11:16am UTC](https://forum.opensearch.org/t/opensearch-ldaps-troubles-yet-again/17427 "2024-01-15T11:16:47Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![Scarecrow](https://avatars.discourse-cdn.com/v4/letter/s/a5b964/32.png) [@Scarecrow](https://forum.opensearch.org/u/Scarecrow)\
**Post date:** [January 15, 2024, 4:03pm UTC](https://forum.opensearch.org/t/opensearch-ldaps-troubles-yet-again/17427/7 "2024-01-15T16:03:02Z")

</div>

alrighty, some google time later and a rabbit hole of firewalld rules that have been added, borked everything and deleted again I’ve found the culprit 🙂

after check the no route to host error I came accross this: [Docker - No route to host - Stack Overflow](https://stackoverflow.com/questions/40214617/docker-no-route-to-host)

more specific:

```auto
firewall-cmd --permanent --zone=public --add-rich-rule='rule family=ipv4 source address=172.27.0.0/16 accept'
firewall-cmd --reload

```

Which borked everything completely.  
Removed the rule, rebooted the 3 hosts.  
After some firewalld logs checking i saw this:

```auto
docker-ingress failed iptables no chain/target/match by that name

```

Down the google rabbit hole:  
[Iptables no chain/target/match by that name docker - Quick fix!](https://bobcares.com/blog/iptables-no-chain-target-match-by-that-name-docker/#:~:text=In%20short%2C%20iptables%20no%20chain,in%20correlation%20with%20the%20Docker).  
Basicly the docker service starts up before the firewalld service does. The docker service adds the firewall rules, so since the firewall service isn’t running, it can’t be added and therefore has no way of getting out.  
A simpel service docker restart fixes everything 😃  
(I had to revert back to the FQDN instead of ip address since the cert doesn’t match the hostname obviously).

So case closed and fixed. Thanks again @pablo 🙂

---

_[View the full topic](https://forum.opensearch.org/t/opensearch-ldaps-troubles-yet-again/17427)._