Enable Kerberos debug on CA APIM layer7 gateway

book

Article ID: 141612

calendar_today

Updated On:

Products

CA Mobile API Gateway CA Rapid App Security CA API Gateway API SECURITY CA API Gateway Enterprise Service Manager (Layer 7) STARTER PACK-7

Issue/Introduction

Enable kerberos debug is helpful to trouble shoot kerberos related problem

Resolution

1. vi /opt/SecureSpan/Gateway/node/default/etc/conf/node.properties 
add one line, 
node.java.opts = -Dsun.security.krb5.debug=true 

2. restart gateway 
service ssg restart 

 

Then the kerberos traffic will be in ssg log,

/opt/SecureSpan/Gateway/node/default/var/logs/ssg_0_0.log 

 

NOTE: This setting will only take effect on current gateway node.