diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-10-19 20:20:43 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-10-19 22:34:58 +1100 |
| commit | 897583476c49d4c037c1d8579fd6841728b871ba (patch) | |
| tree | 7af13693bde048fb25ed41a5121cd40f03042e25 /source4 | |
| parent | d652803c12b79315fe6a1d0410b82492908950e4 (diff) | |
| download | samba-897583476c49d4c037c1d8579fd6841728b871ba.tar.gz samba-897583476c49d4c037c1d8579fd6841728b871ba.tar.bz2 samba-897583476c49d4c037c1d8579fd6841728b871ba.zip | |
s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.
Against the OpenLDAP backend, I currently get failures. This makes it
possible to debug those failures.
Andrew Bartlett
Diffstat (limited to 'source4')
| -rw-r--r-- | source4/auth/sam.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/source4/auth/sam.c b/source4/auth/sam.c index c83a7d478f..b98830a0a9 100644 --- a/source4/auth/sam.c +++ b/source4/auth/sam.c @@ -319,6 +319,8 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx, dn = ldb_dn_from_ldb_val(tmp_ctx, sam_ctx, dn_val); if (dn == NULL) { talloc_free(tmp_ctx); + DEBUG(0, (__location__ ": we failed parsing DN %*.*s, so we cannot calculate the group token\n", + (int)dn_val->length, (int)dn_val->length, dn_val->data)); return NT_STATUS_INTERNAL_DB_CORRUPTION; } @@ -359,6 +361,9 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx, } if (ret != LDB_SUCCESS) { + DEBUG(1, (__location__ ": dsdb_search for %s failed: %s\n", + ldb_dn_get_extended_linearized(tmp_ctx, dn, 1), + ldb_errstring(sam_ctx))); talloc_free(tmp_ctx); return NT_STATUS_INTERNAL_DB_CORRUPTION; } |