On 11/20/22 3:39 PM, Rob Verduijn wrote:
thanx

any clues about the other errors?
Sorry I'm not that familiar with IPA - I'm just a Directory Server guy.  I'm sure someone from the IPA team will respond tomorrow.

ipa-healthcheck  
args=({'msgtype': 101, 'msgid': 3, 'result': 32, 'desc': 'No such object', 'ctrls': [], 'ldap_request': "search_ext_s(('cn=changelog5,cn=config', 0, '(objectClass=*)'),{'attrlist': ['nsslapd-changelogmaxentries'], 'serverctrls': None, '
clientctrls': None, 'escapehatch': 'i am sure'}) on instance TJAKO-THUIS"},)
[
 {
   "source": "ipahealthcheck.ipa.certs",
   "check": "IPACertTracking",
   "result": "CRITICAL",
   "uuid": "6bab1187-3285-4059-9f92-a6e8fba54d2f",
   "when": "20221119105634Z",
   "duration": "0.721246",
   "kw": {
     "exception": "bus, object_path and dbus_interface must not be None."
   }
 },
 {
   "source": "ipahealthcheck.ipa.certs",
   "check": "IPACertDNSSAN",
   "result": "CRITICAL",
   "uuid": "b13b939b-9b8d-4893-ba31-da2dd203551a",
   "when": "20221119105635Z",
   "duration": "0.683679",
   "kw": {
     "exception": "bus, object_path and dbus_interface must not be None."
   }
 },
 {
   "source": "ipahealthcheck.ipa.certs",
   "check": "IPACertRevocation",
   "result": "CRITICAL",
   "uuid": "a235463c-85cd-4277-8ee8-a10a0fcc6e5c",
   "when": "20221119105638Z",
   "duration": "0.655251",
   "kw": {
     "exception": "bus, object_path and dbus_interface must not be None."
   }
 },
 {
   "source": "ipahealthcheck.ipa.files",
   "check": "IPAFileCheck",
   "result": "CRITICAL",
   "uuid": "85deeb45-7e32-4f00-b2ab-a9b0484242c7",
   "when": "20221119105639Z",
   "duration": "0.083885",
   "kw": {
     "exception": "bus, object_path and dbus_interface must not be None."
   }
 }
]



Op zo 20 nov. 2022 om 17:08 schreef Mark Reynolds <mareynol@redhat.com>:


On 11/20/22 10:51 AM, Rob Verduijn wrote:


Op zo 20 nov. 2022 15:57 schreef Mark Reynolds <mareynol@redhat.com>:

On 11/20/22 9:06 AM, Sam Morris via FreeIPA-users wrote:
> On Sat, 2022-11-19 at 11:57 +0100, Rob Verduijn via FreeIPA-users
> wrote:
>> Hi all,
>>
>> I managed to get rid of another error but I still have plenty erros
>> left.
>>
>> Any help would be apreciated.
>>
>> ipa-healthcheck errors remaining:
>>
>> ipa-healthcheck
>> args=({'msgtype': 101, 'msgid': 3, 'result': 32, 'desc': 'No such
>> object', 'ctrls': [], 'ldap_request':
>> "search_ext_s(('cn=changelog5,cn=config', 0,
>> '(objectClass=*)'),{'attrlist': ['nsslapd-changelogmaxentries'],
>> 'serverctrls': None,'
>> clientctrls': None, 'escapehatch': 'i am sure'}) on instance TJAKO-
>> THUIS"},)
> Is this your server telling you that the entry cn=changelog5,cn=config
> does not exist? That sounds pretty bad... try running this (change IPA-
> EXAMPLE-COM to the name of your dirsrv instance):
>
> ldapsearch -H ldapi://%2frun%2fslapd-IPA-EXAMPLE-COM.socket -Y EXTERNAL
> -b cn=changelog5,cn=config -s base

This is fine actually. This is a bug we are looking into.  It should not
be outputting that exception.  It just checking if a backend has a
changelog, not that it's expecting one.  This can be ignored.

Mark

Can you share a link to this bug?

https://bugzilla.redhat.com/show_bug.cgi?id=2115254




>
>>    {
>>      "source": "ipahealthcheck.ipa.certs",
>>      "check": "IPACertTracking",
>>      "result": "CRITICAL",
>>      "uuid": "6bab1187-3285-4059-9f92-a6e8fba54d2f",
>>      "when": "20221119105634Z",
>>      "duration": "0.721246",
>>      "kw": {
>>        "exception": "bus, object_path and dbus_interface must not be
>> None."
>>      }
>>    },
> These look like D-Bus-related errors. Is certmonger started, can you
> run 'getcert list'?
>
--
Directory Server Development Team

-- 
Directory Server Development Team
-- 
Directory Server Development Team