[SSSD] should ad-gpo support additional logon rights?

Jakub Hrozek jhrozek at redhat.com
Thu Jul 3 08:17:31 UTC 2014


On Wed, Jul 02, 2014 at 10:47:25AM +0200, Sumit Bose wrote:
> Explaining on the logs why access to a service was granted or denied is
> always a good idea. I guess those messages will fell in the
> audit-messages category but currently SSSD does not treat audit messages
> specially. Maybe we should start simple and just add an alias to the
> DEBUG macro called AUDIT? Later on we can start handling them differently
> than other debug messages but we will already have (at least for newer
> code) a label in the code where audit information originates.

I assume that 'later' would be in the context of
https://fedorahosted.org/sssd/ticket/2373 and similar tickets.

I wonder if we should add the audit messages more systematically than
only the GPO access provider, though..



More information about the sssd-devel mailing list