What were you trying to do that didn't work?

IPATrustCatalogCheck  returns 'Look up of ID {key} for {domain} {error}' 

What is the impact of this issue to you?

Displays error message.

Please provide the package NVR for which the bug is seen:

ipa-healthcheck-0.19-1.el10.noarch
ipa-server-4.13.0-1.el10.x86_64

How reproducible is this bug?:

Always

Steps to reproduce

1. Setup IPA Server  with trust to AD.
2. ipa-healthcheck --source ipahealthcheck.ipa.trust --all

Expected results

Error shouldn't be shown since we have trust and domains reachable.

Actual results

[root@master ~]# sssctl domain-list
testrelm.test
windows-cc90.test
sub1-cc90.windows-cc90.test

[root@master ~]# ipa trust-find
---------------
1 trust matched
---------------
  Realm name: windows-cc90.test
  Domain NetBIOS name: WINDOWS-CC90
  Domain Security Identifier: S-1-5-21-1400962653-830259912-2918262575
  Trust type: Active Directory domain
  UPN suffixes: windows.test
----------------------------
Number of entries returned 1
----------------------------

[root@master ~]# ipa trustdomain-find
Realm name: windows-cc90.test
  Domain name: sub1-cc90.windows-cc90.test
  Domain NetBIOS name: SUB1-CC90
  Domain Security Identifier: S-1-5-21-3290592033-2971729549-3871617647
  Domain enabled: True

  Domain name: windows-cc90.test
  Domain NetBIOS name: WINDOWS-CC90
  Domain Security Identifier: S-1-5-21-1400962653-830259912-2918262575
  Domain enabled: True
----------------------------
Number of entries returned 2
----------------------------

  {
    "source": "ipahealthcheck.ipa.trust",
    "check": "IPATrustCatalogCheck",
    "result": "WARNING",
    "uuid": "65f68a00-174e-47a1-bc61-8eb44c32bcde",
    "when": "20260113120750Z",
    "duration": "0.088243",
    "kw": {
      "key": {},
      "domain": "windows-cc90.test",
      "error": "returned nothing",
      "msg": "Look up of ID {key} for {domain} {error}"
    }