|
 |
ecf709 |
From cf1bb5464609f5873685406f9e09e43de8738e42 Mon Sep 17 00:00:00 2001
|
|
|
ecf709 |
From: Jakub Hrozek <jhrozek@redhat.com>
|
|
|
ecf709 |
Date: Mon, 22 May 2017 09:55:12 +0200
|
|
|
ecf709 |
Subject: [PATCH 132/135] KRB5: Advise the user to inspect the krb5_child.log
|
|
|
ecf709 |
if the child doesn't return a valid response
|
|
|
ecf709 |
MIME-Version: 1.0
|
|
|
ecf709 |
Content-Type: text/plain; charset=UTF-8
|
|
|
ecf709 |
Content-Transfer-Encoding: 8bit
|
|
|
ecf709 |
|
|
|
ecf709 |
If the child returns a runtime error, it is often not clear from the
|
|
|
ecf709 |
domain debug logs what to do next. This patch adds a DEBUG message that
|
|
|
ecf709 |
tells the admin to look into the krb5_child.log
|
|
|
ecf709 |
|
|
|
ecf709 |
Resolves:
|
|
|
ecf709 |
https://pagure.io/SSSD/sssd/issue/2955
|
|
|
ecf709 |
|
|
|
ecf709 |
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
|
|
|
ecf709 |
(cherry picked from commit 7410f735b64937e0c2401c09b5cffc9c78b11849)
|
|
|
ecf709 |
---
|
|
|
ecf709 |
src/providers/krb5/krb5_auth.c | 3 +++
|
|
|
ecf709 |
1 file changed, 3 insertions(+)
|
|
|
ecf709 |
|
|
|
ecf709 |
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
|
|
|
ecf709 |
index 2faf18d17a735476c20f9cc27b15be4a39cadc5c..894bd41bde031ac33187bfa3b14202e9429a9198 100644
|
|
|
ecf709 |
--- a/src/providers/krb5/krb5_auth.c
|
|
|
ecf709 |
+++ b/src/providers/krb5/krb5_auth.c
|
|
|
ecf709 |
@@ -890,6 +890,9 @@ static void krb5_auth_done(struct tevent_req *subreq)
|
|
|
ecf709 |
state->be_ctx->domain->pwd_expiration_warning,
|
|
|
ecf709 |
&res;;
|
|
|
ecf709 |
if (ret) {
|
|
|
ecf709 |
+ DEBUG(SSSDBG_IMPORTANT_INFO,
|
|
|
ecf709 |
+ "The krb5_child process returned an error. Please inspect the "
|
|
|
ecf709 |
+ "krb5_child.log file or the journal for more information\n");
|
|
|
ecf709 |
DEBUG(SSSDBG_OP_FAILURE, "Could not parse child response [%d]: %s\n",
|
|
|
ecf709 |
ret, strerror(ret));
|
|
|
ecf709 |
goto done;
|
|
|
ecf709 |
--
|
|
|
ecf709 |
2.9.3
|
|
|
ecf709 |
|