[28832] in CVS-changelog-for-Kerberos-V5
krb5 commit: Log invalid restrictions strings
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Mar 14 00:19:20 2015
Date: Sat, 14 Mar 2015 00:19:15 -0400
From: Greg Hudson <ghudson@mit.edu>
Message-Id: <201503140419.t2E4JFXj012540@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/e9eaafeab12b2b62595f4dff2fca3345b2d95b4a
commit e9eaafeab12b2b62595f4dff2fca3345b2d95b4a
Author: Greg Hudson <ghudson@mit.edu>
Date:   Fri Mar 13 13:30:49 2015 -0400
    Log invalid restrictions strings
    
    In kadm5int_acl_parse_restrictions(), output a log message if we break
    out of the parsing loop with an error.  The current structure of the
    loop makes it difficult to pinpoint the bad restrictions field, so
    just output the whole string.
    
    ticket: 8155
    target_version: 1.13.2
    tags: pullup
 src/lib/kadm5/srv/server_acl.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/src/lib/kadm5/srv/server_acl.c b/src/lib/kadm5/srv/server_acl.c
index 86e1367..64f7385 100644
--- a/src/lib/kadm5/srv/server_acl.c
+++ b/src/lib/kadm5/srv/server_acl.c
@@ -349,6 +349,10 @@ kadm5int_acl_parse_restrictions(s, rpp)
                     }
                 }
             }
+            if (code) {
+                krb5_klog_syslog(LOG_ERR, _("%s: invalid restrictions: %s"),
+                                 acl_acl_file, s);
+            }
         }
     }
     if (sp)
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5