The following commands will create the appropriate firewall rules for a RHEL7 system running IdM/FreeIPA

#> firewall-cmd --permanent --add-service=http --add-service=https --add-service=ldap --add-service=ldaps --add-service=kerberos --add-service=kpasswd --add-service=dns --add-service=ntp

#> firewall-cmd --reload