On Sat, 2012-01-14 at 15:52 -0500, Simo Sorce wrote:
On Sat, 2012-01-14 at 11:44 -0500, Stephen Gallagher wrote:
> While trying to triage an issue with HBAC processing, I discovered a
> few
> places where our debugging needs to be fixed.
>
> Patch 0001: When we get a failure removing a netgroup entry from the
> setnetgrent hash table, print the name of the netgroup that we
> couldn't
> remove.
>
> Patch 0002: Raise the debug level of two very noisy statements.
> ipa_hbac_hosts.c: Since we removed the srchost support by default
> (which
> means we don't download the complete hosts list), it is very common to
> process rules for which we don't have hosts or hostgroups in our local
> cache (since they don't apply to the current host). As a result, we
> really need to increase the log level on this message.
>
> sss_krb5.c: When trying to determine the proper principal, we iterate
> through quite a few acceptable alternatives. We should NOT be
> reporting
> failures at level 1, if the correct alternative is further along in
> the
> loop. Level 3 is fine.
>
ACK to both.
Pushed to master.