summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorPavel Březina <pbrezina@redhat.com>2013-10-01 13:46:11 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-10-01 21:27:37 +0200
commitdf3056389818e31b4e8e705120bc9015b3dc2bab (patch)
treea526e1d139a545cd638bf25356db62ba65dc5445 /src
parent9f3e9e9984e48bb45c6c3fb8f49b0ff5bf337393 (diff)
downloadsssd-df3056389818e31b4e8e705120bc9015b3dc2bab.tar.gz
sssd-df3056389818e31b4e8e705120bc9015b3dc2bab.tar.xz
sssd-df3056389818e31b4e8e705120bc9015b3dc2bab.zip
sudo: improve time restrictions debug messages
Diffstat (limited to 'src')
-rw-r--r--src/db/sysdb_sudo.c8
-rw-r--r--src/responder/sudo/sudosrv_cmd.c7
2 files changed, 15 insertions, 0 deletions
diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c
index 65481f136..d7d7fe0bb 100644
--- a/src/db/sysdb_sudo.c
+++ b/src/db/sysdb_sudo.c
@@ -154,6 +154,14 @@ static errno_t sysdb_sudo_check_time(struct sysdb_attrs *rule,
*result = true;
}
+ if (result) {
+ DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] matches time restrictions\n",
+ name));
+ } else {
+ DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] does not match time "
+ "restrictions\n", name));
+ }
+
ret = EOK;
done:
talloc_free(tmp_ctx);
diff --git a/src/responder/sudo/sudosrv_cmd.c b/src/responder/sudo/sudosrv_cmd.c
index ee25b53d1..8f07e8b3a 100644
--- a/src/responder/sudo/sudosrv_cmd.c
+++ b/src/responder/sudo/sudosrv_cmd.c
@@ -108,12 +108,19 @@ errno_t sudosrv_cmd_done(struct sudo_cmd_ctx *cmd_ctx, int ret)
*/
if (cmd_ctx->sudo_ctx->timed) {
/* filter rules by time */
+
+ DEBUG(SSSDBG_TRACE_FUNC, ("Applying time restrictions on"
+ "%u rules\n", cmd_ctx->num_rules));
+
ret = sysdb_sudo_filter_rules_by_time(cmd_ctx, cmd_ctx->num_rules,
cmd_ctx->rules, 0,
&num_rules, &rules);
if (ret != EOK) {
return EFAULT;
}
+
+ DEBUG(SSSDBG_TRACE_FUNC, ("Got %u rules after time filter\n",
+ num_rules));
}
/* send result */