heimdal_debug(5) BSD File Formats Manual heimdal_debug(5)
NAME
heimdal_debug -- how to turn on/off debugging for Kerberos tools
DESCRIPTION
The heimdal_debug kerberos frameworks have several knobs for controlling
logging. The different framework knobs are:
libkrb
The Kerberos library, some gss-api Kerberos output ends up here too
kcm the kcm library (credentials cache, ntlm client)
kdc the kerberos KDC output
digest-service
the digest service (ntlm server)
CONFIGURATION FILE
[logging]
<subsystem> = 0-/SYSLOG:
and watch syslog for logging information.
APPLE MAC OS X
First turn up syslog debugging
sudo syslog -c 0 -d
then you can see the syslog output in Console.app or by running
syslog -w -k org.h5l.asl
To enable more extensive debugging logging for each subsystem, use the
following commands:
Kerberos Library
sudo defaults write /Library/Preferences/com.apple.Kerberos
logging -dict-add krb5 '0-/ASL:'
digest-server
sudo defaults write /Library/Preferences/com.apple.Kerberos
logging -dict-add digest-service '0-/ASL:'
kcm sudo defaults write /Library/Preferences/com.apple.Kerberos
logging -dict-add kcm '0-/ASL:'
kdc sudo defaults write /Library/Preferences/com.apple.Kerberos
logging -dict-add kdc '0-/ASL:'
MIT Kerberos Shim
defaults write com.apple.MITKerberosShim EnableDebugging -bool
true
GSS-API framework logging
sudo defaults write /Library/Preferences/com.apple.GSS Debu-
gLevel -int 10
Other options on Mac OS X
Make the admin API pretend to the server even on client
sudo defaults write /Library/Preferences/com.apple.Kerberos
ForceHeimODServerMode -bool true
SEE ALSO
gss(5), kerberos(8)
HEIMDAL Sep 30, 2011 HEIMDAL
Mac OS X 10.9 - Generated Wed Oct 16 18:24:36 CDT 2013