KB441555: How to enable additional Kerberos debug traces for WebSphere running on IBM JDK

Principal Product Specialist • Strategy

This knowledge base article describes how to enable additional Kerberos debug logging on IBM WebSphere using IBM JDK 7 or 8.

In order to enable additional low level traces when debugging Kerberos related issues, the following two debug JVM parameter options can be enabled:


-Dcom.ibm.security.jgss.debug=all

-Dcom.ibm.security.krb5.Krb5Debug=all

In the WebSphere Console, JVM options can be set under Application Servers > [SERVERNAME] > Process definition > Java Virtual Machine > Generic JVM arguments. Here the -D switch must be added as seen above.

Alternatively, follow the steps outlined in KB47975: How to configure JVM startup arguments in WebSphere 8.5.x running on Unix/Linux for Kerberos (Integrated) Authentication in MicroStrategy Web 9.4.1 and above. to set the debug parameters.
The output of the debug logs will be written into systemOut.log, systemErr.log and MSTR web log.
KB article reference: KB441555

Comment

0 comments

Details

Knowledge Article

Published:

August 22, 2018

Last Updated:

August 22, 2018