4.2. Screening configuration files using Healthcheck

Procedure

• To run Healthcheck tests on IdM configuration file ownership and permissions, while displaying only warnings, errors and critical issues, enter:

  # ipa-healthcheck --source=ipahealthcheck.ipa.files

  A successful test displays empty brackets:

  # ipa-healthcheck --source=ipahealthcheck.ipa.files*
  []

  Failed tests display results similar to the following WARNING:

  {
    "source": "ipahealthcheck.ipa.files",
    "check": "IPAFileNSSDBCheck",
    "result": "WARNING",
    "kw": {
      "key": "_etc_dirsrv_slapd-EXAMPLE-TEST_pkcs11.txt_mode",
      "path": "/etc/dirsrv/slapd-EXAMPLE-TEST/pkcs11.txt",
      "type": "mode",
      "expected": "0640",
      "got": "0666",
      "msg": "Permissions of /etc/dirsrv/slapd-EXAMPLE-TEST/pkcs11.txt are 0666 and should be 0640"
    }
  }

  注記

  Run these tests on all IdM servers when trying to find issues.