On Sat, 2012-01-14 at 11:44 -0500, Stephen Gallagher wrote: > While trying to triage an issue with HBAC processing, I discovered a > few > places where our debugging needs to be fixed. > > Patch 0001: When we get a failure removing a netgroup entry from the > setnetgrent hash table, print the name of the netgroup that we > couldn't > remove. > > Patch 0002: Raise the debug level of two very noisy statements. > ipa_hbac_hosts.c: Since we removed the srchost support by default > (which > means we don't download the complete hosts list), it is very common to > process rules for which we don't have hosts or hostgroups in our local > cache (since they don't apply to the current host). As a result, we > really need to increase the log level on this message. > > sss_krb5.c: When trying to determine the proper principal, we iterate > through quite a few acceptable alternatives. We should NOT be > reporting > failures at level 1, if the correct alternative is further along in > the > loop. Level 3 is fine. > ACK to both.
Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel