configurelocalkdc(1) [osx man page]

configureLocalKDC(1)					    BSD General Commands Manual 				      configureLocalKDC(1)

NAME

     configureLocalKDC -- generate a LocalKDC

SYNOPSIS

     configureLocalKDC

DESCRIPTION

     configureLocalKDC generates a LocalKDC and provisions LKDC service principals.  The script is non-destructive and can be run multiple times.

FILES

     configureLocalKDC does not own, but references the following files:

     /Library/Keychains/System.keychain
     /var/db/krb5kdc/kdc.conf
     /System/Library/LaunchDaemons/edu.mit.Kerberos.krb5kdc.plist
     /Library/Preferences/com.apple.AppleFileServer
     /Library/Preferences/SystemConfiguration/com.apple.smb.server

SEE ALSO

     systemkeychain(8), certtool(1), checkLocalKDC(1), kdcsetup(1), launchctl(1), kadmin(8), defaults(1)

HISTORY

     configureLocalKDC first appeared in version 10.5 of Mac OS X.

Darwin								  August 30, 2007							    Darwin

heimdal_debug(5)					      BSD File Formats Manual						  heimdal_debug(5)

NAME

     heimdal_debug -- how to turn on/off debugging for Kerberos tools

DESCRIPTION

     The heimdal_debug kerberos frameworks have several knobs for controlling logging.	The different framework knobs are:

     libkrb
	  The Kerberos library, some gss-api Kerberos output ends up here too

     kcm  the kcm library (credentials cache, ntlm client)

     kdc  the kerberos KDC output

     digest-service
	  the digest service (ntlm server)

CONFIGURATION FILE

	  [logging]
		  <subsystem> = 0-/SYSLOG:
     and watch syslog for logging information.

APPLE MAC OS X

     First turn up syslog debugging
	   sudo syslog -c 0 -d
     then you can see the syslog output in Console.app or by running
	   syslog -w -k org.h5l.asl
     To enable more extensive debugging logging for each subsystem, use the following commands:

	   Kerberos Library
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add krb5 '0-/ASL:'

	   digest-server
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add digest-service '0-/ASL:'

	   kcm	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kcm '0-/ASL:'

	   kdc	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kdc '0-/ASL:'

	   MIT Kerberos Shim
		defaults write com.apple.MITKerberosShim EnableDebugging -bool true

	   GSS-API framework logging
		sudo defaults write /Library/Preferences/com.apple.GSS DebugLevel -int 10

Other options on Mac OS X
	  Make the admin API pretend to the server even on client
	       sudo defaults write /Library/Preferences/com.apple.Kerberos ForceHeimODServerMode -bool true

SEE ALSO

     gss(5), kerberos(8)

HEIMDAL 
							   Sep 30, 2011 							   HEIMDAL