Enable kerberos debug is helpful to trouble shoot kerberos related problem
1. vi /opt/SecureSpan/Gateway/node/default/etc/conf/node.properties
add one line,
node.java.opts = -Dsun.security.krb5.debug=true
2. restart gateway
service ssg restart
Then the kerberos traffic will be in ssg log,
/opt/SecureSpan/Gateway/node/default/var/logs/ssg_0_0.log
NOTE: This setting will only take effect on current gateway node.