Brian J. Murrell via FreeIPA-users wrote:
Rob Crittenden via FreeIPA-users wrote:
It was changed with freeIPA 4.9.0. It is hardcoded:
standard_logging_setup(debug=True)
It was done as part of https://pagure.io/freeipa/issue/8094 to improve troubleshooting.
Is it really necessary that every installation, whether it's having trouble or not have this noise in their logs? Couldn't/shouldn't this be like most other debug facilities that is enabled when necessary and quiet when not?
Of course, I realize I could just edit /usr/libexec/ipa/ipa-dnskeysync- replica to turn this down, but that only helps me and only until the next installation of ipa-server-dns.
Sure, please file an RFE.
The issue is that logging is configured before the API is, and therefore before any configuration file is read, so there is no debug on/off to be considered.
The order of api.bootstrap and standard_logging_setup need to be reversed in:
daemons/dnssec/ipa-dnskeysync-replica.in:ipalib.api.bootstrap(contex t='dns', confdir=paths.ETC_IPA, in_server=True) daemons/dnssec/ipa-dnskeysyncd.in:api.bootstrap(context='dns', con fdir=paths.ETC_IPA, in_server=True) daemons/dnssec/ipa-ods-exporter.in:ipalib.api.bootstrap(context='dns ', confdir=paths.ETC_IPA, in_server=True)
and use api.env.debug instead of True for.
If a user wanted/needed additional logging they would need to create /etc/ipa/dns.conf with the contents:
[global] debug = True
and restart world.
rob