Hi, On the two CentOS 8 Stream masters (upgraded a few days ago) we now get quite a few DEBUG messages. I haven't seen these before. There is also a WARN - content-sync-plugin. Is this something to be worried about? Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=example.com.,cn=dns,dc=example,dc=com 1e89eb86-e201-11e8-8820-f96efc0c60a4 Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206227 Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: zone example.com/IN: sending notifies (serial 1626178016) Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: client @0x7f54e416c880 172.16.16.31#45677: received notify for zone 'example.com' Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=example.com.,cn=dns,dc=example,dc=com 1e89eb86-e201-11e8-8820-f96efc0c60a4 Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206230 Jul 13 14:06:56 linge.example.com ns-slapd[282944]: [13/Jul/2021:14:06:56.745067868 +0200] - WARN - content-sync-plugin - sync_update_persist_betxn_pre_op - DB retried operation targets "changenumber=206231,cn=changelog" (op=0x7fd372024000 idx_pl=1) => op not changed in PL Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=example.com.,cn=dns,dc=example,dc=com 1e89eb86-e201-11e8-8820-f96efc0c60a4 Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206232 Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: client @0x7f54e416c880 172.16.16.75#48866: received notify for zone '30.16.172.in-addr.arpa' Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=example.com.,cn=dns,dc=example,dc=com 1e89eb86-e201-11e8-8820-f96efc0c60a4 Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206235 Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=30.16.172.in-addr.arpa.,cn=dns,dc=example,dc=com d79d0401-e29b-11e8-8820-f96efc0c60a4 Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206236 Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    Detected modify of entry: idnsname=30.16.172.in-addr.arpa.,cn=dns,dc=example,dc=com d79d0401-e29b-11e8-8820-f96efc0c60a4 Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.syncrepl: DEBUG    New cookie is: linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206237 -- Kees _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Kees Bakker via FreeIPA-users wrote: > Did I somehow raise logger level of ipaserver.dnssec.syncrepl ? > I can't remember I did. > > If these DEBUG messages are harmless I like to be able to switch them off. It was changed with freeIPA 4.9.0. It is hardcoded: standard_logging_setup(debug=True) It was done as part of https://pagure.io/freeipa/issue/8094 to improve troubleshooting.

rob > -- Kees > > On 13-07-2021 15:32, Kees Bakker via FreeIPA-users wrote: >> Hi, >> >> On the two CentOS 8 Stream masters (upgraded a few days ago) we now >> get quite >> a few DEBUG messages. I haven't seen these before. >> >> There is also a WARN - content-sync-plugin. >> >> Is this something to be worried about? >> >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=example.com.,cn=dns,dc=example,dc=com >> 1e89eb86-e201-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206227 >> >> Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: zone >> example.com/IN: sending notifies (serial 1626178016) >> Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: client >> @0x7f54e416c880 172.16.16.31#45677: received notify for zone >> 'example.com' >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=example.com.,cn=dns,dc=example,dc=com >> 1e89eb86-e201-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206230 >> >> Jul 13 14:06:56 linge.example.com ns-slapd[282944]: >> [13/Jul/2021:14:06:56.745067868 +0200] - WARN - content-sync-plugin - >> sync_update_persist_betxn_pre_op - DB retried operation targets >> "changenumber=206231,cn=changelog" (op=0x7fd372024000 idx_pl=1) => op >> not changed in PL >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=example.com.,cn=dns,dc=example,dc=com >> 1e89eb86-e201-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206232 >> >> Jul 13 14:06:56 linge.example.com named-pkcs11[283005]: client >> @0x7f54e416c880 172.16.16.75#48866: received notify for zone >> '30.16.172.in-addr.arpa' >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=example.com.,cn=dns,dc=example,dc=com >> 1e89eb86-e201-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206235 >> >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=30.16.172.in-addr.arpa.,cn=dns,dc=example,dc=com >> d79d0401-e29b-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206236 >> >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG Detected modify of entry: >> idnsname=30.16.172.in-addr.arpa.,cn=dns,dc=example,dc=com >> d79d0401-e29b-11e8-8820-f96efc0c60a4 >> Jul 13 14:06:57 linge.example.com ipa-dnskeysyncd[283246]: >> ipaserver.dnssec.syncrepl: DEBUG New cookie is: >> linge.example.com:389#krbprincipalname=ipa-dnskeysyncd/linge.example.com@example.com,cn=services,cn=accounts,dc=example,dc=com:cn=dns,dc=example,dc=com:(|(objectClass=idnsZone)(objectClass=idnsSecKey)(objectClass=ipk11PublicKey))#206237 >> >> -- >> Kees >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-leave(a)lists.fedorahosted.org >> Fedora Code of Conduct: >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... >> >> Do not reply to spam on the list, report it: >> https://pagure.io/fedora-infrastructure > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... > > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure

Rob Crittenden via FreeIPA-users wrote: > > It was changed with freeIPA 4.9.0. It is hardcoded: > > standard_logging_setup(debug=True) > > It was done as part of https://pagure.io/freeipa/issue/8094 to > improve > troubleshooting. Is it really necessary that every installation, whether it's having trouble or not have this noise in their logs? Couldn't/shouldn't this be like most other debug facilities that is enabled when necessary and quiet when not? Of course, I realize I could just edit /usr/libexec/ipa/ipa-dnskeysync- replica to turn this down, but that only helps me and only until the next installation of ipa-server-dns.