diff options
| -rw-r--r-- | src/db/sysdb_sudo.c | 8 | ||||
| -rw-r--r-- | src/responder/sudo/sudosrv_cmd.c | 7 |
2 files changed, 15 insertions, 0 deletions
diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c index 65481f13..d7d7fe0b 100644 --- a/src/db/sysdb_sudo.c +++ b/src/db/sysdb_sudo.c @@ -154,6 +154,14 @@ static errno_t sysdb_sudo_check_time(struct sysdb_attrs *rule, *result = true; } + if (result) { + DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] matches time restrictions\n", + name)); + } else { + DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] does not match time " + "restrictions\n", name)); + } + ret = EOK; done: talloc_free(tmp_ctx); diff --git a/src/responder/sudo/sudosrv_cmd.c b/src/responder/sudo/sudosrv_cmd.c index ee25b53d..8f07e8b3 100644 --- a/src/responder/sudo/sudosrv_cmd.c +++ b/src/responder/sudo/sudosrv_cmd.c @@ -108,12 +108,19 @@ errno_t sudosrv_cmd_done(struct sudo_cmd_ctx *cmd_ctx, int ret) */ if (cmd_ctx->sudo_ctx->timed) { /* filter rules by time */ + + DEBUG(SSSDBG_TRACE_FUNC, ("Applying time restrictions on" + "%u rules\n", cmd_ctx->num_rules)); + ret = sysdb_sudo_filter_rules_by_time(cmd_ctx, cmd_ctx->num_rules, cmd_ctx->rules, 0, &num_rules, &rules); if (ret != EOK) { return EFAULT; } + + DEBUG(SSSDBG_TRACE_FUNC, ("Got %u rules after time filter\n", + num_rules)); } /* send result */ |