On ti, 09 tammi 2018, lejeczek via FreeIPA-users wrote:
hi
I've install new IPA,
when I restart systemd ipa in /var/log/dirsrv/slapd-PRIVATE/errors I
see:
...
[09/Jan/2018:19:08:15.149362342 +0000] - NOTICE - ldbm_back_start -
total cache size: 3405774848 B;
[09/Jan/2018:19:08:15.207527697 +0000] - ERR - schema-compat-plugin -
scheduled schema-compat-plugin tree scan in about 5 seconds after the
server startup!
[09/Jan/2018:19:08:15.223921091 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
cn=groups,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does
not exist
[09/Jan/2018:19:08:15.225865799 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
cn=computers,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
does not exist
[09/Jan/2018:19:08:15.227653865 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
cn=ng,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not
exist
[09/Jan/2018:19:08:15.229555188 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
ou=sudoers,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist
[09/Jan/2018:19:08:15.231362881 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
cn=users,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does
not exist
[09/Jan/2018:19:08:15.239924305 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target
cn=ad,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not
exist
[09/Jan/2018:19:08:15.243017934 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
does not exist
[09/Jan/2018:19:08:15.244721976 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target cn=casigningcert
cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
does not exist
[09/Jan/2018:19:08:15.356816871 +0000] - ERR - NSACLPlugin - acl_parse
- The ACL target cn=automember rebuild membership,cn=tasks,cn=config
does not exist
[09/Jan/2018:19:08:15.365596472 +0000] - ERR - cos-plugin -
cos_dn_defs_cb - Skipping CoS Definition cn=Password
Policy,cn=accounts,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x--no
CoS Templates found, which should be added before the CoS Definition.
[09/Jan/2018:19:08:15.389272569 +0000] - ERR - schema-compat-plugin -
schema-compat-plugin tree scan will start in about 5 seconds!
[09/Jan/2018:19:08:15.398920701 +0000] - INFO - slapd_daemon - slapd
started. Listening on All Interfaces port 389 for LDAP requests
[09/Jan/2018:19:08:15.400580896 +0000] - INFO - slapd_daemon -
Listening on All Interfaces port 636 for LDAPS requests
[09/Jan/2018:19:08:15.402280166 +0000] - INFO - slapd_daemon -
Listening on /var/run/slapd-PRIVATE-xx.xx.PRIVATE-CAM-AC-UK.socket for
LDAPI requests
[09/Jan/2018:19:08:20.397061810 +0000] - ERR - schema-compat-plugin -
warning: no entries set up under
ou=sudoers,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
[09/Jan/2018:19:08:20.400997461 +0000] - ERR - schema-compat-plugin -
warning: no entries set up under cn=ng,
cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
[09/Jan/2018:19:08:20.404415072 +0000] - ERR - schema-compat-plugin -
warning: no entries set up under cn=computers,
cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x
[09/Jan/2018:19:08:20.406040249 +0000] - ERR - schema-compat-plugin -
Finished plugin initialization.
How critical are these? And naturally, how come? in the first place?
They aren't
critical. There is a need to inform about an action that the
compat plugin would be doing during 389-ds startup but since anything
but 'error' log level is silenced in a default configuration, it has a
consequence of sounding 'too loud'. ACL plugin does the same -- certain
entries might not exist when ACIs are parsed but ACLs have to be applied
even during entry creation.
--
/ Alexander Bokovoy