Enable Kerberos debug on CA APIM layer7 gateway

Products

• CA Mobile API Gateway
• CA Rapid App Security
• CA API Gateway
• API SECURITY
• CA API Gateway Enterprise Service Manager (Layer 7)
• STARTER PACK-7

Issue/Introduction

Enable kerberos debug is helpful to trouble shoot kerberos related problem

Resolution

1. vi /opt/SecureSpan/Gateway/node/default/etc/conf/node.properties 
add one line, 
node.java.opts = -Dsun.security.krb5.debug=true 

2. restart gateway 
service ssg restart 

 

Then the kerberos traffic will be in ssg log,

/opt/SecureSpan/Gateway/node/default/var/logs/ssg_0_0.log 

 

NOTE: This setting will only take effect on current gateway node.