From 55fdd0d28e7c88f333ad78183b0ba37a1da34160 Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: Tue, 1 Oct 2013 13:46:11 +0200
Subject: sudo: improve time restrictions debug messages

---
 src/db/sysdb_sudo.c              | 8 ++++++++
 src/responder/sudo/sudosrv_cmd.c | 7 +++++++
 2 files changed, 15 insertions(+)

(limited to 'src')

diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c
index 65481f13..d7d7fe0b 100644
--- a/src/db/sysdb_sudo.c
+++ b/src/db/sysdb_sudo.c
@@ -154,6 +154,14 @@ static errno_t sysdb_sudo_check_time(struct sysdb_attrs *rule,
         *result = true;
     }
 
+    if (result) {
+        DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] matches time restrictions\n",
+                                 name));
+    } else {
+        DEBUG(SSSDBG_TRACE_ALL, ("Rule [%s] does not match time "
+                                 "restrictions\n", name));
+    }
+
     ret = EOK;
 done:
     talloc_free(tmp_ctx);
diff --git a/src/responder/sudo/sudosrv_cmd.c b/src/responder/sudo/sudosrv_cmd.c
index ee25b53d..8f07e8b3 100644
--- a/src/responder/sudo/sudosrv_cmd.c
+++ b/src/responder/sudo/sudosrv_cmd.c
@@ -108,12 +108,19 @@ errno_t sudosrv_cmd_done(struct sudo_cmd_ctx *cmd_ctx, int ret)
          */
         if (cmd_ctx->sudo_ctx->timed) {
             /* filter rules by time */
+
+            DEBUG(SSSDBG_TRACE_FUNC, ("Applying time restrictions on"
+                                      "%u rules\n", cmd_ctx->num_rules));
+
             ret = sysdb_sudo_filter_rules_by_time(cmd_ctx, cmd_ctx->num_rules,
                                                   cmd_ctx->rules, 0,
                                                   &num_rules, &rules);
             if (ret != EOK) {
                 return EFAULT;
             }
+
+            DEBUG(SSSDBG_TRACE_FUNC, ("Got %u rules after time filter\n",
+                                      num_rules));
         }
 
         /* send result */
-- 
cgit