[SSSD] [PATCHES] Improve debugging

Simo Sorce simo at redhat.com
Sat Jan 14 20:52:43 UTC 2012


On Sat, 2012-01-14 at 11:44 -0500, Stephen Gallagher wrote:
> While trying to triage an issue with HBAC processing, I discovered a
> few
> places where our debugging needs to be fixed.
> 
> Patch 0001: When we get a failure removing a netgroup entry from the
> setnetgrent hash table, print the name of the netgroup that we
> couldn't
> remove.
> 
> Patch 0002: Raise the debug level of two very noisy statements.
> ipa_hbac_hosts.c: Since we removed the srchost support by default
> (which
> means we don't download the complete hosts list), it is very common to
> process rules for which we don't have hosts or hostgroups in our local
> cache (since they don't apply to the current host). As a result, we
> really need to increase the log level on this message.
> 
> sss_krb5.c: When trying to determine the proper principal, we iterate
> through quite a few acceptable alternatives. We should NOT be
> reporting
> failures at level 1, if the correct alternative is further along in
> the
> loop. Level 3 is fine.
> 
ACK to both.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list