2083218 – ipa-dnskeysyncd floods /var/log/messages with DEBUG messages

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 2083218 - ipa-dnskeysyncd floods /var/log/messages with DEBUG messages

Summary: ipa-dnskeysyncd floods /var/log/messages with DEBUG messages

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 9
Classification:	Red Hat
Component:	ipa
Sub Component:
Version:	9.0
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	medium
Target Milestone:	rc
Target Release:	---
Assignee:	Rob Crittenden
QA Contact:	ipa-qe
Docs Contact:	Filip Hanzelka
URL:
Whiteboard:
Depends On:	2059396
Blocks:
TreeView+	depends on / blocked

Reported:	2022-05-09 13:30 UTC by Rob Crittenden
Modified:	2022-11-15 10:33 UTC (History)
CC List:	9 users (show)
Fixed In Version:	ipa-4.9.10-1.el9
Doc Type:	Enhancement
Doc Text:	.The `ipa-dnskeysyncd` and `ipa-ods-exporter` debug messages are no longer logged to /var/log/messages by default Previously, `ipa-dnskeysyncd`, the service that is responsible for the LDAP-to-OpenDNSSEC synchronization, and `ipa-ods-exporter`, the Identity Management (IdM) OpenDNSSEC exporter service, logged all debug messages to `/var/log/messages` by default. As a consequence, log files grew substantially. With this enhancement, you can configure the log level by setting `debug=True` in the `/etc/ipa/dns.conf` file. For more information, refer to `default.conf(5)`, the man page for the IdM configuration file.
Clone Of:	2059396
Environment:
Last Closed:	2022-11-15 10:00:08 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Issue Tracker	FREEIPA-8249	None	None	None	2022-05-09 13:40:48 UTC
Red Hat Issue Tracker	RHELPLAN-121429	None	None	None	2022-05-09 13:41:12 UTC
Red Hat Product Errata	RHBA-2022:7988	None	None	None	2022-11-15 10:00:33 UTC

Description Rob Crittenden 2022-05-09 13:30:54 UTC

+++ This bug was initially created as a clone of Bug #2059396 +++

Description of problem:

I've just noticed that my /var/log/messages log file grew for nearly 1G withing las t week or so (since last rotation).

Most of the messages were produced by ipa-dnskeysyncd and vast majority of them where tagged with "DEBUG" clearly indicating them as debug messages.

rsyslog configuration DOES NOT route ANY debug level messages to any of the files.

This is the line for the /var/log/messages:

*.info;mail.none;authpriv.none;cron.none                /var/log/messages

The excerpt of the messages:
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/02fb809d-7384-bc5e-5e4f-b6323a23853b.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/b9a80f92-e6ce-a8a8-5e5d-6524e4868ce9.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/fc39eaf7-3564-9b91-8f90-78d959798212.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a8728635-7a4f-160d-ddc5-bef9596b1a9d.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/d11c4818-e780-c6ed-e3f0-edcbbbdee7e0.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/token.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/08ab937e-ba08-f048-5646-62f0ccf99a58.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/1c723a39-a6db-9ee8-4651-d76a7cc91a84.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/6319c4ef-1bd6-902e-5dd9-081f3bcfc6e3.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e6d08596-8bea-66fe-74e6-3faf960da05f.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/704ec42b-f534-4827-27b1-0e56f7ea2565.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/76225839-2993-0907-0c4c-81e3ed9b0fb5.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/4da28d58-41b4-20cc-3c17-ab8274b04275.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/af91ab94-092a-d6c7-e3e7-d17b7fa197bc.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a9a4638b-3562-034d-71a7-e7280044d353.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/55482eaa-262f-a972-be8c-138f7acdabb6.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/454a2218-5ea8-a09f-b750-7a46e3f58239.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/c6975e09-936d-843f-3e98-7f10caa9381a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/ffd03bc1-2be0-82b9-311c-d9ded23fd09b.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/df1ad250-b989-5415-1c50-959643f20fda.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/ed147039-af10-4166-fd6c-5d1fb9aac95a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a068caf1-e64d-f06e-10ab-310a20567e81.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/55fc5277-da4f-bea7-2558-0b6fda202e4a.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a17e64fa-b141-175d-b129-5b197d0ad0f5.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a9a4638b-3562-034d-71a7-e7280044d353.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/7bddd2dd-2402-a3ce-7276-7e34b09c7a3e.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/08ab937e-ba08-f048-5646-62f0ccf99a58.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e14a44f5-7535-2daa-2e99-3479d2598c2d.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a599f0c7-33e5-cbda-c6cf-0261a620ddad.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/5e78730f-a432-321a-a0e5-4fb72b1057e6.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/147b9465-56e1-5824-29e4-2dd5c1d24483.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/43813b8d-87f8-46f8-be4d-83bca06544c2.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/e8549900-e9ea-a355-00c8-467f91424217.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/1c94cc1a-bf53-66a8-dcf5-e3dec0053111.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/18954a13-389d-60ce-63fc-1f68c578231a.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/06e4d55e-5963-2b4c-d084-5a9b5464c20b.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/9a20b3d0-9c27-2794-ced2-3651d494f1f6.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/5213f0eb-2d66-90dd-57c9-a2d5cf4a4f56.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/a8728635-7a4f-160d-ddc5-bef9596b1a9d.object
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/d3d64f27-d217-5332-c6db-83f61023eccb.lock
Feb 28 23:32:27 filippa ipa-dnskeysyncd[126691]: ipaserver.dnssec.bindmgr: DEBUG    Fixing file permissions: /var/lib/ipa/dnssec/tokens/9ad363a0-d7a9-0b9a-01f3-10e007e4b61f/11cc7cc6-b969-c03a-c616-28410d2e3831.object

And much more of these and different messages.




Version-Release number of selected component (if applicable):

filippa:~# rpm -qa ipa*
ipa-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-trust-ad-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-client-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-server-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-healthcheck-core-0.7-6.module_el8.5.0+2603+92118e57.noarch
ipa-client-common-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-4.9.6-10.module_el8.5.0+2603+92118e57.x86_64
ipa-selinux-4.9.6-10.module_el8.5.0+2603+92118e57.noarch
ipa-server-dns-4.9.6-10.module_el8.5.0+2603+92118e57.noarch




How reproducible:
Not sure. I think there is a reason for these but I haven't pinpointed it yet. And it is not relevant to this issue. See below.



Actual results:
The debug level messages ARE flooding the files which are not configured to collect them.



Expected results:
The debug level messages ARE NOT flooding the files which are not configured to collect them.

Additional info:
I believe this is caused by incorrect logging configuration in the ipa-dnskeysyncd process. It probably is sending debug messages with the higher level than LOG_DEBUG designated for debug logging. I suspect it incorrectly uses LOG_INFO for debugging logs.

There is additional issue with the above messages. They seem to be logging information about SUCCESSFULL operation. I am not sure how useful it is. Please reconsider and drop it.

Disclosure:
Found on AlmaLinux 8.5.

--- Additional comment from Rob Crittenden on 2022-03-09 14:16:34 UTC ---

debug is hardcoded as True.

I believe this can be resolved by finalizing the IPA API first and using api.env.debug instead. This would allow a user to create /etc/ipa/dns.conf to enable debugging if additional troubleshooting is needed.

--- Additional comment from Rob Crittenden on 2022-03-15 20:36:23 UTC ---

Link to upstream ticket https://pagure.io/freeipa/issue/9128

Comment 2 Florence Blanc-Renaud 2022-06-02 09:22:42 UTC

Fixed upstream
master:
https://pagure.io/freeipa/c/cef6a90288d9ec0c69f74ddce93db14694ba7a76

Comment 3 Florence Blanc-Renaud 2022-06-02 12:16:41 UTC

Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/c00286462196026337600113119eb5522b96141a

Comment 8 Mohammad Rizwan 2022-07-12 07:05:33 UTC

[root@master ~]# rpm -qa | grep ipa-server
ipa-server-common-4.10.0-2.el9.noarch
ipa-server-4.10.0-2.el9.x86_64
ipa-server-dns-4.10.0-2.el9.noarch
ipa-server-trust-ad-4.10.0-2.el9.x86_64


Before enabling logs:

[root@master ~]# 
[root@master ~]# grep DEBUG /var/log/messages
Jul 12 02:35:00 localhost chronyd[709]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 02:45:13 localhost chronyd[22474]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)

[root@master ~]# systemctl status ipa-dnskeysyncd
● ipa-dnskeysyncd.service - IPA key daemon
     Loaded: loaded (/usr/lib/systemd/system/ipa-dnskeysyncd.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-07-12 02:51:54 EDT; 9min ago
   Main PID: 27529 (ipa-dnskeysyncd)
      Tasks: 1 (limit: 23381)
     Memory: 68.1M
        CPU: 3.205s
     CGroup: /system.slice/ipa-dnskeysyncd.service
             └─27529 /usr/bin/python3 -I /usr/libexec/ipa/ipa-dnskeysyncd

Jul 12 02:51:55 master.testrelm.test python3[27529]: GSSAPI client step 1
Jul 12 02:51:55 master.testrelm.test python3[27529]: GSSAPI client step 2
Jul 12 02:51:55 master.testrelm.test ipa-dnskeysyncd[27529]: ipa-dnskeysyncd: INFO     Commencing sync process
Jul 12 02:51:55 master.testrelm.test ipa-dnskeysyncd[27529]: ipaserver.dnssec.keysyncer: INFO     Initial LDAP dump is done, s>
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(96): Missing log.level in configuration. Using default >
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using d>
Jul 12 02:51:57 master.testrelm.test python3[27535]: Configuration.cpp(124): Missing slots.removable in configuration. Using d>
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1
Jul 12 02:51:57 master.testrelm.test python3[27535]: GSSAPI client step 1


After enabling log level:
[root@master ~]# cat /etc/ipa/dns.conf
[global]
debug = True

[root@master ~]# ipactl restart
Restarting Directory Service
Restarting krb5kdc Service
Restarting kadmin Service
Restarting named Service
Restarting httpd Service
Restarting ipa-custodia Service
Restarting pki-tomcatd Service
Restarting ipa-otpd Service
Restarting ipa-dnskeysyncd Service
ipa: INFO: The ipactl command was successful
[root@master ~]# 
[root@master ~]# 
[root@master ~]# systemctl status ipa-dnskeysyncd
● ipa-dnskeysyncd.service - IPA key daemon
     Loaded: loaded (/usr/lib/systemd/system/ipa-dnskeysyncd.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-07-12 03:03:24 EDT; 3s ago
   Main PID: 28286 (ipa-dnskeysyncd)
      Tasks: 1 (limit: 23381)
     Memory: 68.2M
        CPU: 3.277s
     CGroup: /system.slice/ipa-dnskeysyncd.service
             └─28286 /usr/bin/python3 -I /usr/libexec/ipa/ipa-dnskeysyncd

Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in local HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new master keys in LDAP HSM: set>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: INFO     sync_metadata: keys in local HSM>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in local HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new zone keys in LDAP HSM: set()
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: INFO     sync_metadata: keys in local HSM>
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Key metadata in LDAP: {}
Jul 12 03:03:27 master.testrelm.test ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Zones modified but skipped dur>
[root@master ~]# 
[root@master ~]# 
[root@master ~]# grep DEBUG /var/log/messages
Jul 12 02:35:00 localhost chronyd[709]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 02:45:13 localhost chronyd[22474]: chronyd version 4.2 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing all plugin modules in ipaserver.plugins...
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.aci
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automember
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automount
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseldap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.baseldap is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseuser
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.batch
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ca
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.caacl
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.cert
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certmap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certprofile
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.config
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.delegation
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dns
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dnsserver
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dogtag
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.domainlevel
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.group
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbac
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.hbac is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacrule
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvc
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvcgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbactest
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.host
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hostgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idp
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idrange
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idviews
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.internal
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.join
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.krbtpolicy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ldap2
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.location
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.migration
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.misc
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.netgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otp
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.otp is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otpconfig
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otptoken
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.passwd
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.permission
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ping
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pkinit
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.privilege
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pwpolicy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.rabase
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.rabase is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.radiusproxy
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.realmdomains
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.role
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.schema
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selfservice
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selinuxusermap
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.server
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverrole
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverroles
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.service
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.servicedelegation
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.session
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.stageuser
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.subid
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudo
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.sudo is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmd
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmdgroup
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudorule
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.topology
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.trust
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.user
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.vault
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.virtual
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.virtual is not a valid plugin module
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.whoami
Jul 12 03:03:24 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.xmlserver
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysyncd: DEBUG    Kerberos principal: ipa-dnskeysyncd/master.testrelm.test
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Initializing principal ipa-dnskeysyncd/master.testrelm.test using keytab /etc/ipa/dnssec/ipa-dnskeysyncd.keytab
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    using ccache /tmp/ipa-dnskeysyncd.ccache
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Attempt 1/5: success
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysyncd: DEBUG    LDAP URL: ldapi://%2Frun%2Fslapd-TESTRELM-TEST.socket/cn%3Ddns%2Cdc%3Dtestrelm%2Cdc%3Dtest??sub?%28%7C%28objectClass%3DidnsZone%29%28objectClass%3DidnsSecKey%29%28objectClass%3Dipk11PublicKey%29%29
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Current cookie is: None (not received yet)
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: idnsname=testrelm.test.,cn=dns,dc=testrelm,dc=test eff37403-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: idnsname=102.0.10.in-addr.arpa.,cn=dns,dc=testrelm,dc=test eff37407-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    Detected add of entry: ipk11UniqueID=f76dbb5e-01ae-11ed-b988-fa163e530c7b,cn=keys,cn=sec,cn=dns,dc=testrelm,dc=test eff3741e-01ae-11ed-beca-effa96b451bf
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: master.testrelm.test:389#krbprincipalname=ipa-dnskeysyncd/master.testrelm.test,cn=services,cn=accounts,dc=testrelm,dc=test:cn=dns,dc=testrelm,dc=test:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#52
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    Starting external process
Jul 12 03:03:25 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    args=['/usr/libexec/ipa/ipa-dnskeysync-replica']
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    Process finished, return code=0
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    stdout=
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipapython.ipautil: DEBUG    stderr=ipalib.plugable: DEBUG    importing all plugin modules in ipaserver.plugins...
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.aci
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automember
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.automount
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseldap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.baseldap is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.baseuser
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.batch
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ca
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.caacl
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.cert
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certmap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.certprofile
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.config
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.delegation
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dns
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dnsserver
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.dogtag
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.domainlevel
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.group
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbac
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.hbac is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacrule
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvc
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbacsvcgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hbactest
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.host
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.hostgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idp
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idrange
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.idviews
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.internal
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.join
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.krbtpolicy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ldap2
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.location
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.migration
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.misc
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.netgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otp
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.otp is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otpconfig
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.otptoken
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.passwd
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.permission
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.ping
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pkinit
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.privilege
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.pwpolicy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.rabase
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.rabase is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.radiusproxy
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.realmdomains
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.role
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.schema
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selfservice
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.selinuxusermap
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.server
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverrole
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.serverroles
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.service
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.servicedelegation
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.session
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.stageuser
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.subid
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudo
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.sudo is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmd
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudocmdgroup
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.sudorule
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.topology
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.trust
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.user
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.vault
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.virtual
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    ipaserver.plugins.virtual is not a valid plugin module
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.whoami
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.plugable: DEBUG    importing plugin module ipaserver.plugins.xmlserver
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Kerberos principal: ipa-dnskeysyncd/master.testrelm.test
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Initializing principal ipa-dnskeysyncd/master.testrelm.test using keytab /etc/ipa/dnssec/ipa-dnskeysyncd.keytab
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    using ccache /tmp/ipa-dnskeysync-replica.ccache
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipalib.install.kinit: DEBUG    Attempt 1/5: success
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Got TGT
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Connecting to LDAP
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    Connected
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in local HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    master keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new master keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in local HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    zone keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipa-dnskeysync-replica: DEBUG    new zone keys in LDAP HSM: set()
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Key metadata in LDAP: {}
Jul 12 03:03:27 localhost ipa-dnskeysyncd[28286]: ipaserver.dnssec.bindmgr: DEBUG    Zones modified but skipped during bindmgr.sync: set()



By default DEBUG logs are not logged to /var/log/messages. When enabled logs, it is properly logging. Hence marking the bug as verified.

Comment 19 errata-xmlrpc 2022-11-15 10:00:08 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7988

Note You need to log in before you can comment on or make changes to this bug.