On ti, 09 tammi 2018, lejeczek via FreeIPA-users wrote:

hi I've install new IPA, when I restart systemd ipa in /var/log/dirsrv/slapd-PRIVATE/errors I see:

... [09/Jan/2018:19:08:15.149362342 +0000] - NOTICE - ldbm_back_start - total cache size: 3405774848 B; [09/Jan/2018:19:08:15.207527697 +0000] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! [09/Jan/2018:19:08:15.223921091 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

cn=groups,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.225865799 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

cn=computers,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.227653865 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

cn=ng,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.229555188 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

ou=sudoers,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.231362881 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

cn=users,cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.239924305 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target

cn=ad,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x does not exist [09/Jan/2018:19:08:15.243017934 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x

does not exist [09/Jan/2018:19:08:15.244721976 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x

does not exist [09/Jan/2018:19:08:15.356816871 +0000] - ERR - NSACLPlugin - acl_parse

• The ACL target cn=automember rebuild membership,cn=tasks,cn=config

does not exist [09/Jan/2018:19:08:15.365596472 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x--no CoS Templates found, which should be added before the CoS Definition. [09/Jan/2018:19:08:15.389272569 +0000] - ERR - schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds! [09/Jan/2018:19:08:15.398920701 +0000] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests [09/Jan/2018:19:08:15.400580896 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests [09/Jan/2018:19:08:15.402280166 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-PRIVATE-xx.xx.PRIVATE-CAM-AC-UK.socket for LDAPI requests [09/Jan/2018:19:08:20.397061810 +0000] - ERR - schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x [09/Jan/2018:19:08:20.400997461 +0000] - ERR - schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x [09/Jan/2018:19:08:20.404415072 +0000] - ERR - schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x [09/Jan/2018:19:08:20.406040249 +0000] - ERR - schema-compat-plugin - Finished plugin initialization.

How critical are these? And naturally, how come? in the first place?

They aren't critical. There is a need to inform about an action that the compat plugin would be doing during 389-ds startup but since anything but 'error' log level is silenced in a default configuration, it has a consequence of sounding 'too loud'. ACL plugin does the same -- certain entries might not exist when ACIs are parsed but ACLs have to be applied even during entry creation.