heimdal_debug(5)					      BSD File Formats Manual						  heimdal_debug(5)

NAME

     heimdal_debug -- how to turn on/off debugging for Kerberos tools

DESCRIPTION

     The heimdal_debug kerberos frameworks have several knobs for controlling logging.	The different framework knobs are:

     libkrb
	  The Kerberos library, some gss-api Kerberos output ends up here too

     kcm  the kcm library (credentials cache, ntlm client)

     kdc  the kerberos KDC output

     digest-service
	  the digest service (ntlm server)

CONFIGURATION FILE

	  [logging]
		  <subsystem> = 0-/SYSLOG:
     and watch syslog for logging information.

APPLE MAC OS X

     First turn up syslog debugging
	   sudo syslog -c 0 -d
     then you can see the syslog output in Console.app or by running
	   syslog -w -k org.h5l.asl
     To enable more extensive debugging logging for each subsystem, use the following commands:

	   Kerberos Library
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add krb5 '0-/OSLOG:normal:'

	   digest-server
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add digest-service '0-/OSLOG:normal:'

	   kcm	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kcm '0-/OSLOG:normal:'

	   kdc	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kdc '0-/OSLOG:normal:'

	   MIT Kerberos Shim
		defaults write com.apple.MITKerberosShim EnableDebugging -bool true

	   GSS-API framework logging
		sudo defaults write /Library/Preferences/com.apple.GSS DebugLevel -int 10

Other options on Mac OS X
	  Make the admin API pretend to the server even on client
	       sudo defaults write /Library/Preferences/com.apple.Kerberos ForceHeimODServerMode -bool true

SEE ALSO

     gss(5), kerberos(8)

HEIMDAL 
							   Sep 30, 2011 							   HEIMDAL