How to enable Kerberos Debug at the FglAM level (4309953)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

How to enable Kerberos Debug at the FglAM level
Description

How can Kerberos debug be enabled in the Foglight Agent Manager (FglAM)?
Resolution
1. Create a backup of the FGLAM_HOME/state/default/config/auth.login.config configuration file and change line 7 to the following:
```
com.sun.security.auth.module.Krb5LoginModule required client=TRUE refreshKrb5Config=TRUE debug=TRUE;
```
2. Deactivate the related agent.
3. Re-start the FglAM with the following parameter added to the FGLAM_HOME/state/default/config/baseline.jvmargs.config configuration file; for example:
```
vmparameter.X = "-Dsun.security.krb5.debug=true";
```
  Note: Replace X with the next number in the sequence of existing parameters.
4. Turn on the debug by running the following command or by setting Debug Level for the FlglAM on the Agent Managers dashboard to Standard debug logging.
```
[FglAM_HOME]/bin/fglam --set-global-debug-level 1
```
5. Activate the related agent and allow collections to run for 10 minutes.
6. Turn off the debug by running the following command or by setting Debug Level for the FglAM on the Agent Managers dashboard to Debug logging disabled.
```
[FglAM_HOME]/bin/fglam --set-global-debug-level 0
```
7. Remove or comment out the parameters added in step (3) and restore the backup of auth.login.config.
8. Generate a new FglAM Support Bundle.

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title