On Thu, 12 Dec 2024 12:50:48 -0500 "Brian J. Murrell via FreeIPA-users" <[email protected]> wrote:
> On Thu, 2024-12-12 at 17:30 +0100, Jernej Jakob via FreeIPA-users > wrote: > > Check /var/log/dirsrv/slapd-EXAMPLE-COM/access for MOD and DEL > > operations. > > No DEL operations but a number of MOD operations, 82 in the last 2 > hours. 242 in the 4.5h prior and 212 in the almost 5h prior to that. That should be the issue then. My domain only gets a couple tens of MOD and DEL operations a day, most of which are dyndns updates of client records. Look at what they're doing and find out why. > > > > > Also check /var/log/pki/pki-tomcat/ca/debug.YYYY-MM-DD.log for > > activity if you happen to be impacted by buggy certmonger client(s) > > that get stuck in a certificate renewal loop. > > Here's my debug log for today so far: > > 2024-12-12 00:02:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:07:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:12:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:17:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:22:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:27:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:32:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > … > 2024-12-12 12:12:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:17:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:22:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:27:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:32:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:37:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:42:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions > 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Updating serial number counter > 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking serial number ranges > 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: > Checking request ID ranges > 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for > conflicting entries > 2024-12-12 12:47:25 [Timer-0] INFO: SessionTimer: checking security domain > sessions That looks like a normal idle log, so you're not impacted by that bug that I linked. > > > Seems to be repeating every 10 or so minutes. > > Cheers, > b. >
pgpOM7WadVhxo.pgp
Description: OpenPGP digital signature
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
