On Sat, 2012-01-14 at 11:44 -0500, Stephen Gallagher wrote:
While trying to triage an issue with HBAC processing, I discovered a
few
places where our debugging needs to be fixed.
Patch 0001: When we get a failure removing a netgroup entry from the
setnetgrent hash table, print the name of the netgroup that we
couldn't
remove.
Patch 0002: Raise the debug level of two very noisy statements.
ipa_hbac_hosts.c: Since we removed the srchost support by default
(which
means we don't download the complete hosts list), it is very common to
process rules for which we don't have hosts or hostgroups in our local
cache (since they don't apply to the current host). As a result, we
really need to increase the log level on this message.
sss_krb5.c: When trying to determine the proper principal, we iterate
through quite a few acceptable alternatives. We should NOT be
reporting
failures at level 1, if the correct alternative is further along in
the
loop. Level 3 is fine.
ACK to both.
Simo.
--
Simo Sorce * Red Hat, Inc * New York