Description of problem:

Seen within ipa-healthcheck:
# ipa-healthcheck --debug --source ipahealthcheck.ds --check ReplicationChangelogCheck

Calling check <ipahealthcheck.ds.replication.ReplicationChangelogCheck object at 0x7f2c66819ba8>
args=({'msgtype': 101, 'msgid': 3, 'result': 32, 'desc': 'No such object', 'ctrls': [], 'ldap_request': "search_ext_s(('cn=changelog5,cn=config', 0, '(objectClass=*)'),{'attrlist': ['nsslapd-changelogmaxentries'], 'serverctrls': None, 'clientctrls': None, 'escapehatch': 'i am sure'}) on instance EXAMPLE-TEST"},)
[]

This doesn't affect behavior. No failures are reported but this is a pretty scary message for end-users to see. All-in-all it's just an LDAP 32 so its no big deal but people will notice.

I did a little digging to see what generates it but didn't go further than this.

(Pdb) s
> /usr/lib/python3.6/site-packages/lib389/replica.py(1073)_lint_cl_trimming()
-> if self.get_attr_val_utf8('nsslapd-changelogmaxentries') is None and \
(Pdb) n
args=({'msgtype': 101, 'msgid': 3, 'result': 32, 'desc': 'No such object', 'ctrls': [], 'ldap_request': "search_ext_s(('cn=changelog5,cn=config', 0, '(objectClass=*)'),{'attrlist': ['nsslapd-changelogmaxentries'], 'serverctrls': None, 'clientctrls': None, 'escapehatch': 'i am sure'}) on instance EXAMPLE-TEST"},)
ldap.NO_SUCH_OBJECT: {'msgtype': 101, 'msgid': 3, 'result': 32, 'desc': 'No such object', 'ctrls': [], 'ldap_request': "search_ext_s(('cn=changelog5,cn=config', 0, '(objectClass=*)'),{'attrlist': ['nsslapd-changelogmaxentries'], 'serverctrls': None, 'clientctrls': None, 'escapehatch': 'i am sure'}) on instance EXAMPLE-TEST"}

Version-Release number of selected component (if applicable):

389-ds-base-1.4.3.30-3.module+el8.7.0+15600+347cafc6.x86_64
ipa-healthcheck-0.7-14.module+el8.7.0+15352+88b578e5.noarch
ipa-server-4.9.8-8.module+el8.7.0+14711+1e093de3.x86_64

How reproducible:

Every time

Steps to Reproduce:
1. ipa-server-install -a password -p password -r EXAMPLE.TEST -U --setup-dns --allow-zone-overlap --no-forwarders -N --auto-reverse --hostname ipa.example.test
2. ipa-healthcheck --source ipahealthcheck.ds --check ReplicationChangelogCheck