How to enable Kerberos Debug at the FglAM level (4309953)

Chat now with support

Return

Did this article solve an issue for you?

[Select Rating]

Title

How to enable Kerberos Debug at the FglAM level
Description

How can Kerberos debug be enabled in the Foglight Agent Manager (FglAM)?
Resolution
1. Change line 7 of [FGLAM_HOME]/state/default/config/auth.login.config to the following:
```
com.sun.security.auth.module.Krb5LoginModule required client=TRUE refreshKrb5Config=TRUE debug=TRUE;
```
2. Stop all the agents except the related agent.
3. Re-start the FglAM with "-Dsun.security.krb5.debug=true -Dquest.debug=3"
  Parameters can be added to the [FGLAM_HOME]/state/default/config/baseline.jvmargs.config file; for example:
```
vmparameter.X = "-Dsun.security.krb5.debug=true";
vmparameter.Y = "-Dquest.debug=3";
```
  Note: Replace X and Y with the next numbers in the sequence of existing paramters.
4. Let only the related agent run for 10 minutes.
5. Turn off the debug by following command and start those agents stopped in step (2).
```
[FglAM_HOME]/bin/fglam --set-global-debug-level 0
```
6. Remove or comment out the parameters added in step (3).
7. Generate a new FglAM Support Bundle.

Did this article solve an issue for you?

[Select Rating]

Title