[Freeipa-users] Re: ipa-healthcheck false positives

2022-01-06 Thread Ronald Wimmer via FreeIPA-users
On 05.01.22 20:16, Rob Crittenden via FreeIPA-users wrote: Ronald Wimmer wrote: On 05.01.22 14:48, Rob Crittenden wrote: Ronald Wimmer via FreeIPA-users wrote: Is it true that these "Errors" appear on an IPA server without CA role present and can be ignored? CRITICAL: pki.server.healthcheck.c

[Freeipa-users] shutdown/poweroff freeipa hang if replication exists?

2022-01-06 Thread Harry G. Coin via FreeIPA-users
For the last few months, shutdown/poweroff of freeipa server systems hangs until systemd forcibly terminates freeipa.  During that time I see ns-slapd at nearly full CPU consumption.  I see log entries such as: ipa-dnskeysyncd[1578]: ipaserver.dnssec.syncrepl even though there are no domains w