From 55fdd0d28e7c88f333ad78183b0ba37a1da34160 Mon Sep 17 00:00:00 2001 From: Pavel Březina Date: Tue, 1 Oct 2013 13:46:11 +0200 Subject: sudo: improve time restrictions debug messages --- src/db/sysdb_sudo.c | 8 ++++++++ src/responder/sudo/sudosrv_cmd.c | 7 +++++++ 2 files changed, 15 insertions(+) diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c index 65481f13..d7d7fe0b 100644 --- a/src/db/sysdb_sudo.c +++ b/src/db/sysdb_sudo.c @@ -154,6 +154,14 @@ static errno_t sysdb_sudo_check_time(struct sysdb_attrs *rule, *result = true; } + if (result) { + DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] matches time restrictions\n", + name)); + } else { + DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] does not match time " + "restrictions\n", name)); + } + ret = EOK; done: talloc_free(tmp_ctx); diff --git a/src/responder/sudo/sudosrv_cmd.c b/src/responder/sudo/sudosrv_cmd.c index ee25b53d..8f07e8b3 100644 --- a/src/responder/sudo/sudosrv_cmd.c +++ b/src/responder/sudo/sudosrv_cmd.c @@ -108,12 +108,19 @@ errno_t sudosrv_cmd_done(struct sudo_cmd_ctx *cmd_ctx, int ret) */ if (cmd_ctx->sudo_ctx->timed) { /* filter rules by time */ + + DEBUG(SSSDBG_TRACE_FUNC, ("Applying time restrictions on" + "%u rules\n", cmd_ctx->num_rules)); + ret = sysdb_sudo_filter_rules_by_time(cmd_ctx, cmd_ctx->num_rules, cmd_ctx->rules, 0, &num_rules, &rules); if (ret != EOK) { return EFAULT; } + + DEBUG(SSSDBG_TRACE_FUNC, ("Got %u rules after time filter\n", + num_rules)); } /* send result */ -- cgit