From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 13 Mar 2015 17:30:49 +0000 (-0400)
Subject: Log invalid restrictions strings
X-Git-Tag: krb5-1.14-alpha1~152
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e9eaafeab12b2b62595f4dff2fca3345b2d95b4a;p=thirdparty%2Fkrb5.git

Log invalid restrictions strings

In kadm5int_acl_parse_restrictions(), output a log message if we break
out of the parsing loop with an error.  The current structure of the
loop makes it difficult to pinpoint the bad restrictions field, so
just output the whole string.

ticket: 8155
target_version: 1.13.2
tags: pullup
---

diff --git a/src/lib/kadm5/srv/server_acl.c b/src/lib/kadm5/srv/server_acl.c
index 86e136741e..64f7385408 100644
--- a/src/lib/kadm5/srv/server_acl.c
+++ b/src/lib/kadm5/srv/server_acl.c
@@ -349,6 +349,10 @@ kadm5int_acl_parse_restrictions(s, rpp)
                     }
                 }
             }
+            if (code) {
+                krb5_klog_syslog(LOG_ERR, _("%s: invalid restrictions: %s"),
+                                 acl_acl_file, s);
+            }
         }
     }
     if (sp)