[SSSD] [PATCHES] Improve debugging

Stephen Gallagher sgallagh at redhat.com
Tue Jan 17 13:34:35 UTC 2012


On Sat, 2012-01-14 at 15:52 -0500, Simo Sorce wrote:
> On Sat, 2012-01-14 at 11:44 -0500, Stephen Gallagher wrote:
> > While trying to triage an issue with HBAC processing, I discovered a
> > few
> > places where our debugging needs to be fixed.
> > 
> > Patch 0001: When we get a failure removing a netgroup entry from the
> > setnetgrent hash table, print the name of the netgroup that we
> > couldn't
> > remove.
> > 
> > Patch 0002: Raise the debug level of two very noisy statements.
> > ipa_hbac_hosts.c: Since we removed the srchost support by default
> > (which
> > means we don't download the complete hosts list), it is very common to
> > process rules for which we don't have hosts or hostgroups in our local
> > cache (since they don't apply to the current host). As a result, we
> > really need to increase the log level on this message.
> > 
> > sss_krb5.c: When trying to determine the proper principal, we iterate
> > through quite a few acceptable alternatives. We should NOT be
> > reporting
> > failures at level 1, if the correct alternative is further along in
> > the
> > loop. Level 3 is fine.
> > 
> ACK to both.


Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120117/7ad16e71/attachment.sig>


More information about the sssd-devel mailing list