Kerberos logs in IS 10.3

, , ,
1

Guys,

Does anyone know where in the IS 10.3 the Kerberos-related logging events are actually logged, such as (hypothetical examples) ‘connected to the KDC, token retrieved etc.’

There is no ‘logging facilty’ in the IS Admin > Settings > Logging > Server, Integration Server for ‘Kerberos’.

The objective is to troubleshoot/check whether the ‘Kerberos config’ (or any other auth request) is working, or miconfigured, or whatever else.

Any suggestion in this direction is welcome!

2

Hi Feng,
The kerberos login is performed by the login module from the JVM. You can increase it’s logging in two ways:

  1. Edit the login context in /config/is_jaas.cnf and include “debug=true” as shown below:
IS_KERBEROS_OUTBOUND {
    com.sun.security.auth.module.Krb5LoginModule required
			debug=true;
};
  1. Edit /profiles/IS_/configuration/custom_wrapper.conf and add this java system property -Dsun.security.krb5.debug=true

Then restart the Integration Server. The logging will go to System.out so you can find them in /profiles/IS_/logs/wrapper.log.

Hope this helps.

3

I’ve give a try, and then revert back.

4

Hi @Senthil, I configured this, but I had no luck so far in seeing any logs… (perhaps I’m doind something wrong)

Would you mind sharing a sample operation that would trigger spitting a log entry?