Page MenuHomePhabricator
Create Task
Maniphest T413827

Add ipset on civicrm role for api.intacct.com
Closed, ResolvedPublic
Actions

Description

We need to contact api.intacct.com for the new finance integration. To do so, we need to allow the civi hosts to connect to that host/ips via https. This is related to T413347.

Steps needed:

  • add ipset definition for api.intacct.com
  • add the set to the civicrm role
  • update the iptables rules to allow connections to this new set with proper user restrictions as needed

Related Objects

Event Timeline

Dwisehaupt created this task.Jan 5 2026, 9:03 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 5 2026, 9:03 PM
Dwisehaupt closed this task as Resolved.Jan 6 2026, 12:45 AM
Dwisehaupt claimed this task.
Dwisehaupt moved this task from Triage to Done on the fundraising-tech-ops board.

Set entry (api.intacct) created and added to the civicrm role. iptables rules updated for the civicrm role to allow outbound connections to port 443. No user restriction at this time. Verified connection using openssl s_client -connect api.intacct.com:443 and we see the correct certificates.

Dwisehaupt moved this task from Triage to FR-Ops on the Fundraising-Backlog board.Jan 6 2026, 12:45 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits