Sam Morris
Sam Morris
Closes: https://github.com/thoth-station/micropipenv/issues/293
The UK is divided into four countries: England (ISO 3166-2 `GB-ENG`), Wales (`GB-WLS`), Scotland (`GB-SCT`) and Northern Ireland (`GB-NIR`; actually ISO 3166-2 describes `GB-NIR` as a province not a country......
Unless I've missed something there doesn't seem to be a health check for CRL publishing. This would: * Fetch `https://$HOSTNAME` and obtain TLS server certificate * Obtain the CRL distribution...
With these changes, it's a lot more obvious when reported errors are caused by a health check timeout. ``` Starting Execute IPA Healthcheck for Prometheus... Internal server error 'Link' ---...
``` # ipa-healthcheck --source=pki.server.healthcheck.clones.connectivity_and_data --check=ClonesConnectivyAndDataCheck --output-type=human Unable to reach KRA at [https://ipa6.example.com:443](https://ipa6.example.com/): Request timed out ERROR: pki.server.healthcheck.clones.connectivity_and_data.ClonesConnectivyAndDataCheck ``` The 'request timed out' message implies that an attempt to fetch a...
I've got a machine where `resolv.conf` was changed from: ``` # auto-generated by IPA installer search ipa.example.com nameserver 127.0.0.1 nameserver ::1 ``` to: ``` ; generated by /usr/sbin/dhclient-script nameserver 203.0.113.1...
I just found that one of my IPA servers was missing two certmonger tracking requests (for httpd and dirsrv). This was picked up by `ipa-healthcheck`. The fix in this case...
I believe firewalld should configure `rpfilter` rules for IPv4 like it already does for IPv6. As a remote worker, I connect to my office network with a VPN. Unknown to...
Implement rpfilter for IPv4. Also change the nftables backend's IPv6 rpfilter rules to perform strict reverse path checking (it currently performs loose checking, in opposition to the ip6tables backend and...