freeipa

#7095 [tracker] please rotate & compress /var/lib/pki/pki-tomcat/logs/ca/debug
Closed: fixed Opened by harri.

Closed: fixed
Reopen Issue

FreeIPA 4.4.0 (Centos 7.3) writes giant logfiles in /var/lib/pki/pki-tomcat/logs/ca/debug by default, which are neither rotated nor compressed. The logfile on my major CA host has grown to 1.1GByte within 18 months.

You don't have to delete old logs, but I would suggest to rotate and compress these logfiles once per week per default.

There is already a ticket opened against pki:
814: Provide log rotation for PKI debug logs

AFAICS #814 is a pointer to #195, but this is open for >5 years and has been postponed recently :-(.

This needs to be fixed in pki -> changing into tracker bug

Metadata Update from @pvoborni:
- Issue set to the milestone: Future Releases
- Issue tagged with: rfe, tracker

Any news about this?

No, we are merely tracking the upstream RFE (now https://pagure.io/dogtagpki/issue/814)

I'll update the issue in their tracker to make it pop up on their radar again.

Daily log rotation has been implemented in dogtagpki master branch (i.e. 10.6.0) and we already depend on pki_version 10.6.0-0.2, hence closing as fixed.

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue set to the milestone: FreeIPA 4.7 (was: Future Releases)
- Issue status updated to: Closed (was: Open)

master:

  • a947695ab034821fb8b70cdc8b66898e5c7ebb45 Fix TestSubCAkeyReplication providing the right path to pki log
Metadata
None

rfe tracker

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.