freeipa-ldap/freeipa-ldaps deprecated should use freeipa-4

[lessfoobar]

https://imgur.com/a/xEysZ9Y

[rjeffman]

Is this supported on any version of firewalld? The roles must be supported, for example on CentOS 7.

Also, NTP port should also be supported, so something like (untested) {{ "--add-service=net" if ipaserver_no_ntp | default("True") | bool else "" }} to cope with NTP port which is not covered by service firewall-4.

And please, add a proper commit message explaining why the change is needed and what the change is about.

[rjeffman]

BTW, thank you for the PR. This is a great catch!

[lessfoobar]

@rjeffman somebody have already merged your suggestion thus I've fixed the freeipa-4 for runtime and permanent. Could you please review once more.