From e9eaafeab12b2b62595f4dff2fca3345b2d95b4a Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Fri, 13 Mar 2015 13:30:49 -0400 Subject: [PATCH] Log invalid restrictions strings In kadm5int_acl_parse_restrictions(), output a log message if we break out of the parsing loop with an error. The current structure of the loop makes it difficult to pinpoint the bad restrictions field, so just output the whole string. ticket: 8155 target_version: 1.13.2 tags: pullup --- src/lib/kadm5/srv/server_acl.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/lib/kadm5/srv/server_acl.c b/src/lib/kadm5/srv/server_acl.c index 86e136741e..64f7385408 100644 --- a/src/lib/kadm5/srv/server_acl.c +++ b/src/lib/kadm5/srv/server_acl.c @@ -349,6 +349,10 @@ kadm5int_acl_parse_restrictions(s, rpp) } } } + if (code) { + krb5_klog_syslog(LOG_ERR, _("%s: invalid restrictions: %s"), + acl_acl_file, s); + } } } if (sp) -- 2.47.2