On Thu, 2024-12-12 at 17:30 +0100, Jernej Jakob via FreeIPA-users wrote: > Check /var/log/dirsrv/slapd-EXAMPLE-COM/access for MOD and DEL > operations.
No DEL operations but a number of MOD operations, 82 in the last 2 hours. 242 in the 4.5h prior and 212 in the almost 5h prior to that. > > Also check /var/log/pki/pki-tomcat/ca/debug.YYYY-MM-DD.log for > activity if you happen to be impacted by buggy certmonger client(s) > that get stuck in a certificate renewal loop. Here's my debug log for today so far: 2024-12-12 00:02:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:07:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:12:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:17:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:22:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:27:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:32:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries … 2024-12-12 12:12:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:17:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:22:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:27:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:32:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:37:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:42:25 [Timer-0] INFO: SessionTimer: checking security domain sessions 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Updating serial number counter 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking serial number ranges 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: Checking request ID ranges 2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for conflicting entries 2024-12-12 12:47:25 [Timer-0] INFO: SessionTimer: checking security domain sessions Seems to be repeating every 10 or so minutes. Cheers, b.
signature.asc
Description: This is a digitally signed message part
-- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue