[SSSD] [PATCHES] Improve debugging

Stephen Gallagher sgallagh at redhat.com
Sat Jan 14 16:44:15 UTC 2012


While trying to triage an issue with HBAC processing, I discovered a few
places where our debugging needs to be fixed.

Patch 0001: When we get a failure removing a netgroup entry from the
setnetgrent hash table, print the name of the netgroup that we couldn't
remove.

Patch 0002: Raise the debug level of two very noisy statements.
ipa_hbac_hosts.c: Since we removed the srchost support by default (which
means we don't download the complete hosts list), it is very common to
process rules for which we don't have hosts or hostgroups in our local
cache (since they don't apply to the current host). As a result, we
really need to increase the log level on this message.

sss_krb5.c: When trying to determine the proper principal, we iterate
through quite a few acceptable alternatives. We should NOT be reporting
failures at level 1, if the correct alternative is further along in the
loop. Level 3 is fine.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Raise-the-debug-level-of-two-very-noisy-statements.patch
Type: text/x-patch
Size: 1935 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120114/2b045532/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-NSS-Improve-DEBUG-messages-for-netgroup-cache.patch
Type: text/x-patch
Size: 1150 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120114/2b045532/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120114/2b045532/attachment.sig>


More information about the sssd-devel mailing list