KB441680: How to enable additional Kerberos debug logging on WebSphere 8.5+ running IBM JDK 7 or 8

For additional logging when troubleshooting Kerberos issues occurring on WebSphere running on IBM JDK 7 or 8, the following JVM startup options can be set:

• com.ibm.security.jgss.debug=all
• com.ibm.security.krb5.Krb5Debug=all

1. In the WebSphere console, navigate to Application servers > server1 > Process definition > Java Virtual Machine > Custom properties.
2. Click New

3. Click ok and save changes.

4. Restart WebSphere for changes to take effect.
Note:

• Kerberos debug trace will be logged into WebSphere systemOut.log.
• Do not keep the debug trace enabled over a long period of time or in production.

Knowledge Base article ID: KB441680