On Thu, 2024-12-12 at 17:30 +0100, Jernej Jakob via FreeIPA-users
wrote:
> Check /var/log/dirsrv/slapd-EXAMPLE-COM/access for MOD and DEL
> operations.

No DEL operations but a number of MOD operations, 82 in the last 2
hours.  242 in the 4.5h prior and 212 in the almost 5h prior to that.

> 
> Also check /var/log/pki/pki-tomcat/ca/debug.YYYY-MM-DD.log for
> activity if you happen to be impacted by buggy certmonger client(s)
> that get stuck in a certificate renewal loop.

Here's my debug log for today so far:

2024-12-12 00:02:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 00:02:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:07:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:12:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 00:12:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:17:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:22:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 00:22:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:27:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:32:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 00:32:33 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
…
2024-12-12 12:12:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 12:12:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:17:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:22:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 12:22:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:27:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:32:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 12:32:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:37:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:42:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions
2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Updating serial number counter
2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking serial number ranges
2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: SerialNumberUpdateTask: 
Checking request ID ranges
2024-12-12 12:42:34 [SerialNumberUpdateTask] INFO: Repository: Searching for 
conflicting entries
2024-12-12 12:47:25 [Timer-0] INFO: SessionTimer: checking security domain 
sessions


Seems to be repeating every 10 or so minutes.

Cheers,
b.

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to