diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2017-05-22 09:55:12 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2017-05-23 10:52:23 +0200 |
| commit | 7410f735b64937e0c2401c09b5cffc9c78b11849 (patch) | |
| tree | 6a6fb30fbd81abe00f61f4ec13a059d6fe88bc78 | |
| parent | c4ddb9ccab670f9c0d0377680237b62f9f91c496 (diff) | |
| download | sssd-7410f735b64937e0c2401c09b5cffc9c78b11849.tar.gz sssd-7410f735b64937e0c2401c09b5cffc9c78b11849.tar.xz sssd-7410f735b64937e0c2401c09b5cffc9c78b11849.zip | |
KRB5: Advise the user to inspect the krb5_child.log if the child doesn't return a valid response
If the child returns a runtime error, it is often not clear from the
domain debug logs what to do next. This patch adds a DEBUG message that
tells the admin to look into the krb5_child.log
Resolves:
https://pagure.io/SSSD/sssd/issue/2955
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
| -rw-r--r-- | src/providers/krb5/krb5_auth.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c index 2faf18d17..894bd41bd 100644 --- a/src/providers/krb5/krb5_auth.c +++ b/src/providers/krb5/krb5_auth.c @@ -890,6 +890,9 @@ static void krb5_auth_done(struct tevent_req *subreq) state->be_ctx->domain->pwd_expiration_warning, &res); if (ret) { + DEBUG(SSSDBG_IMPORTANT_INFO, + "The krb5_child process returned an error. Please inspect the " + "krb5_child.log file or the journal for more information\n"); DEBUG(SSSDBG_OP_FAILURE, "Could not parse child response [%d]: %s\n", ret, strerror(ret)); goto done; |