On Wed, Jul 02, 2014 at 10:47:25AM +0200, Sumit Bose wrote:
Explaining on the logs why access to a service was granted or denied
is
always a good idea. I guess those messages will fell in the
audit-messages category but currently SSSD does not treat audit messages
specially. Maybe we should start simple and just add an alias to the
DEBUG macro called AUDIT? Later on we can start handling them differently
than other debug messages but we will already have (at least for newer
code) a label in the code where audit information originates.
I assume that 'later' would be in the context of
https://fedorahosted.org/sssd/ticket/2373 and similar tickets.
I wonder if we should add the audit messages more systematically than
only the GPO access provider, though..