Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2083218

Summary: ipa-dnskeysyncd floods /var/log/messages with DEBUG messages
Product: Red Hat Enterprise Linux 9 Reporter: Rob Crittenden <rcritten>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: medium Docs Contact: Filip Hanzelka <fhanzelk>
Priority: unspecified    
Version: 9.0CC: brian, fhanzelk, frenaud, ipa-qe, myusuf, rcritten, sumenon, tomek, tscherf
Target Milestone: rcKeywords: Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.9.10-1.el9 Doc Type: Enhancement
Doc Text:
.The `ipa-dnskeysyncd` and `ipa-ods-exporter` debug messages are no longer logged to /var/log/messages by default Previously, `ipa-dnskeysyncd`, the service that is responsible for the LDAP-to-OpenDNSSEC synchronization, and `ipa-ods-exporter`, the Identity Management (IdM) OpenDNSSEC exporter service, logged all debug messages to `/var/log/messages` by default. As a consequence, log files grew substantially. With this enhancement, you can configure the log level by setting `debug=True` in the `/etc/ipa/dns.conf` file. For more information, refer to `default.conf(5)`, the man page for the IdM configuration file.
 Story Points: ---
Clone Of: 2059396 Environment:
Last Closed: 2022-11-15 10:00:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2059396    
Bug Blocks:    

Description Rob Crittenden 2022-05-09 13:30:54 UTC 
+++ This bug was initially created as a clone of Bug #2059396 +++

Description of problem:

I've just noticed that my /var/log/messages log file grew for nearly 1G withing las t week or so (since last rotation).

Most of the messages were produced by ipa-dnskeysyncd and vast majority of them where tagged with "DEBUG" clearly indicating them as debug messages.

rsyslog configuration DOES NOT route ANY debug level messages to any of the files.

This is the line for the /var/log/messages:

*.info;mail.none;authpriv.none;cron.none                /var/log/messages

The excerpt of the messages:
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/02fb809d-7384-bc5e-5e4f-b6323a23853b.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/b9a80f92-e6ce-a8a8-5e5d-6524e4868ce9.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/fc39eaf7-3564-9b91-8f90-78d959798212.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a8728635-7a4f-160d-ddc5-bef9596b1a9d.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/d11c4818-e780-c6ed-e3f0-edcbbbdee7e0.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/token.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/08ab937e-ba08-f048-5646-62f0ccf99a58.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/1c723a39-a6db-9ee8-4651-d76a7cc91a84.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/6319c4ef-1bd6-902e-5dd9-081f3bcfc6e3.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e6d08596-8bea-66fe-74e6-3faf960da05f.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/704ec42b-f534-4827-27b1-0e56f7ea2565.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/76225839-2993-0907-0c4c-81e3ed9b0fb5.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/4da28d58-41b4-20cc-3c17-ab8274b04275.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/af91ab94-092a-d6c7-e3e7-d17b7fa197bc.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a9a4638b-3562-034d-71a7-e7280044d353.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/55482eaa-262f-a972-be8c-138f7acdabb6.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/454a2218-5ea8-a09f-b750-7a46e3f58239.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/c6975e09-936d-843f-3e98-7f10caa9381a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/ffd03bc1-2be0-82b9-311c-d9ded23fd09b.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/df1ad250-b989-5415-1c50-959643f20fda.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/ed147039-af10-4166-fd6c-5d1fb9aac95a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a068caf1-e64d-f06e-10ab-310a20567e81.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/55fc5277-da4f-bea7-2558-0b6fda202e4a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a17e64fa-b141-175d-b129-5b197d0ad0f5.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a9a4638b-3562-034d-71a7-e7280044d353.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/7bddd2dd-2402-a3ce-7276-7e34b09c7a3e.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/08ab937e-ba08-f048-5646-62f0ccf99a58.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e14a44f5-7535-2daa-2e99-3479d2598c2d.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a599f0c7-33e5-cbda-c6cf-0261a620ddad.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/5e78730f-a432-321a-a0e5-4fb72b1057e6.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/147b9465-56e1-5824-29e4-2dd5c1d24483.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/43813b8d-87f8-46f8-be4d-83bca06544c2.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e8549900-e9ea-a355-00c8-467f91424217.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/1c94cc1a-bf53-66a8-dcf5-e3dec0053111.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/18954a13-389d-60ce-63fc-1f68c578231a.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/06e4d55e-5963-2b4c-d084-5a9b5464c20b.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/9a20b3d0-9c27-2794-ced2-3651d494f1f6.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/5213f0eb-2d66-90dd-57c9-a2d5cf4a4f56.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a8728635-7a4f-160d-ddc5-bef9596b1a9d.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/d3d64f27-d217-5332-c6db-83f61023eccb.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/11cc7cc6-b969-c03a-c616-28410d2e3831.object

And much more of these and different messages.




Version-Release number of selected component (if applicable):

filippa:~# rpm -qa ipa*
ipa-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-trust-ad-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-client-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-server-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-healthcheck-core-0.7-6.module_el8.5.0+2603+92118e57.noarch
ipa-client-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-selinux-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-dns-4.9.6-10.module_el8.5.0+2603+92118e57.noarch




How reproducible:
Not sure. I think there is a reason for these but I haven't pinpointed it yet. And it is not relevant to this issue. See below.



Actual results:
The debug level messages ARE flooding the files which are not configured to collect them.



Expected results:
The debug level messages ARE NOT flooding the files which are not configured to collect them.

Additional info:
I believe this is caused by incorrect logging configuration in the ipa-dnskeysyncd process. It probably is sending debug messages with the higher level than LOG_DEBUG designated for debug logging. I suspect it incorrectly uses LOG_INFO for debugging logs.

There is additional issue with the above messages. They seem to be logging information about SUCCESSFULL operation. I am not sure how useful it is. Please reconsider and drop it.

Disclosure:
Found on AlmaLinux 8.5.

--- Additional comment from Rob Crittenden on 2022-03-09 14:16:34 UTC ---

debug is hardcoded as True.

I believe this can be resolved by finalizing the IPA API first and using api.env.debug instead. This would allow a user to create /etc/ipa/dns.conf to enable debugging if additional troubleshooting is needed.

--- Additional comment from Rob Crittenden on 2022-03-15 20:36:23 UTC ---

Link to upstream ticket https://pagure.io/freeipa/issue/9128
Comment 2 Florence Blanc-Renaud 2022-06-02 09:22:42 UTC 
Fixed upstream
master:
https://pagure.io/freeipa/c/cef6a90288d9ec0c69f74ddce93db14694ba7a76
Comment 3 Florence Blanc-Renaud 2022-06-02 12:16:41 UTC 
Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/c00286462196026337600113119eb5522b96141a
Comment 8 Mohammad Rizwan 2022-07-12 07:05:33 UTC 
[root@master ~]# rpm -qa | grep ipa-server
ipa-server-common-4.10.0-2.el9.noarch
ipa-server-4.10.0-2.el9.x86_64
ipa-server-dns-4.10.0-2.el9.noarch
ipa-server-trust-ad-4.10.0-2.el9.x86_64


Before enabling logs:

[root@master ~]# 
[root@master ~]# grep DEBUG /var/log/messages
Jul 12 02:35:00 localhost chronyd[709]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 02:45:13 localhost chronyd[22474]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)

[root@master ~]# systemctl status ipa-dnskeysyncd
● ipa-dnskeysyncd.service - IPA key daemon
     Loaded: loaded (/usr/lib/systemd/system/ipa-dnskeysyncd.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-07-12 02:51:54 EDT; 9min ago
   Main PID: 27529 (ipa-dnskeysyncd)
      Tasks: 1 (limit: 23381)
     Memory: 68.1M
        CPU: 3.205s
     CGroup: /system.slice/ipa-dnskeysyncd.service
             └─27529 /usr/bin/python3 -I /usr/libexec/ipa/ipa-dnskeysyncd

Jul 12 02:51:55 master.testrelm.test python3[27529]: GSSAPI client step 1
Jul 12 02:51:55 master.testrelm.test python3[27529]: GSSAPI client step 2
Jul 12 02:51:55 master.testrelm.test ipa-dnskeysyncd[27529]: ipa-dnskeysyncd: INFO     Commencing sync process
Jul 12 02:51:55 master.testrelm.test ipa-dnskeysyncd[27529]: ipaserver.dnssec.keysyncer: INFO     Initial LDAP dump is done, s>
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(96): Missing log.level in configuration. Using default >
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using d>
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(124): Missing slots.removable in configuration. Using d>
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1


After enabling log level:
[root@master ~]# cat /etc/ipa/dns.conf
[global]
debug = True

[root@master ~]# ipactl restart
Restarting Directory Service
Restarting krb5kdc Service
Restarting kadmin Service
Restarting named Service
Restarting httpd Service
Restarting ipa-custodia Service
Restarting pki-tomcatd Service
Restarting ipa-otpd Service
Restarting ipa-dnskeysyncd Service
ipa: INFO: The ipactl command was successful
[root@master ~]# 
[root@master ~]# 
[root@master ~]# systemctl status ipa-dnskeysyncd
● ipa-dnskeysyncd.service - IPA key daemon
     Loaded: loaded (/usr/lib/systemd/system/ipa-dnskeysyncd.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-07-12 03:03:24 EDT; 3s ago
   Main PID: 28286 (ipa-dnskeysyncd)
      Tasks: 1 (limit: 23381)
     Memory: 68.2M
        CPU: 3.277s
     CGroup: /system.slice/ipa-dnskeysyncd.service
             └─28286 /usr/bin/python3 -I /usr/libexec/ipa/ipa-dnskeysyncd

Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in local HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new master keys in LDAP HSM: set>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: INFO     sync_metadata: keys in local HSM>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in local HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new zone keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: INFO     sync_metadata: keys in local HSM>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Key metadata in LDAP: {}
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Zones modified but skipped dur>
[root@master ~]# 
[root@master ~]# 
[root@master ~]# grep DEBUG /var/log/messages
Jul 12 02:35:00 localhost chronyd[709]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 02:45:13 localhost chronyd[22474]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing all plugin modules in ipaserver.plugins...
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.aci
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automember
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automount
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseldap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.baseldap is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseuser
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.batch
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ca
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.caacl
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.cert
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certmap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certprofile
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.config
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.delegation
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dns
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dnsserver
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dogtag
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.domainlevel
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.group
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbac
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.hbac is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacrule
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvc
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvcgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbactest
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.host
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hostgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idp
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idrange
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idviews
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.internal
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.join
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.krbtpolicy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ldap2
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.location
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.migration
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.misc
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.netgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otp
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.otp is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otpconfig
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otptoken
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.passwd
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.permission
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ping
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pkinit
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.privilege
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pwpolicy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.rabase
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.rabase is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.radiusproxy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.realmdomains
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.role
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.schema
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selfservice
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selinuxusermap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.server
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverrole
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverroles
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.service
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.servicedelegation
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.session
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.stageuser
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.subid
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudo
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.sudo is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmd
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmdgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudorule
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.topology
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.trust
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.user
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.vault
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.virtual
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.virtual is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.whoami
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.xmlserver
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysyncd: DEBUG    Kerberos principal: ipa-dnskeysyncd/master.testrelm.test
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Initializing principal ipa-dnskeysyncd/master.testrelm.test using keytab /etc/ipa/dnssec/ipa-dnskeysyncd.keytab
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    using ccache /tmp/ipa-dnskeysyncd.ccache
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Attempt 1/5: success
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysyncd: DEBUG    LDAP URL: ldapi://%2Frun%2Fslapd-TESTRELM-TEST.socket/cn%3Ddns%2Cdc%3Dtestrelm%2Cdc%3Dtest??sub?%28%7C%28objectClass%3DidnsZone%29%28objectClass%3DidnsSecKey%29%28objectClass%3Dipk11PublicKey%29%29
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Current cookie is: None (not received yet)
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: idnsname=testrelm.test.,cn=dns,dc=testrelm,dc=test eff37403-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: idnsname=102.0.10.in-addr.arpa.,cn=dns,dc=testrelm,dc=test eff37407-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: ipk11UniqueID=f76dbb5e-01ae-11ed-b988-fa163e530c7b,cn=keys,cn=sec,cn=dns,dc=testrelm,dc=test eff3741e-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: master.testrelm.test:389#krbprincipalname=ipa-dnskeysyncd/master.testrelm.test,cn=services,cn=accounts,dc=testrelm,dc=test:cn=dns,dc=testrelm,dc=test:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#52
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    Starting external process
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    args=['/usr/libexec/ipa/ipa-dnskeysync-replica']
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    Process finished, return code=0
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    stdout=
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    stderr=ipalib.plugable: DEBUG    importing all plugin modules in ipaserver.plugins...
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.aci
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automember
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automount
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseldap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.baseldap is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseuser
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.batch
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ca
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.caacl
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.cert
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certmap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certprofile
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.config
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.delegation
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dns
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dnsserver
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dogtag
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.domainlevel
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.group
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbac
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.hbac is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacrule
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvc
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvcgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbactest
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.host
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hostgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idp
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idrange
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idviews
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.internal
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.join
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.krbtpolicy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ldap2
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.location
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.migration
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.misc
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.netgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otp
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.otp is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otpconfig
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otptoken
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.passwd
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.permission
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ping
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pkinit
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.privilege
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pwpolicy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.rabase
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.rabase is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.radiusproxy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.realmdomains
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.role
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.schema
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selfservice
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selinuxusermap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.server
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverrole
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverroles
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.service
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.servicedelegation
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.session
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.stageuser
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.subid
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudo
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.sudo is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmd
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmdgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudorule
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.topology
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.trust
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.user
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.vault
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.virtual
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.virtual is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.whoami
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.xmlserver
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Kerberos principal: ipa-dnskeysyncd/master.testrelm.test
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Initializing principal ipa-dnskeysyncd/master.testrelm.test using keytab /etc/ipa/dnssec/ipa-dnskeysyncd.keytab
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    using ccache /tmp/ipa-dnskeysync-replica.ccache
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Attempt 1/5: success
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Got TGT
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Connecting to LDAP
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Connected
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in local HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new master keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in local HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new zone keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Key metadata in LDAP: {}
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Zones modified but skipped during bindmgr.sync: set()



By default DEBUG logs are not logged to /var/log/messages. When enabled logs, it is properly logging. Hence marking the bug as verified.
Comment 19 errata-xmlrpc 2022-11-15 10:00:08 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7988