From 5d7623645897d59ed949a8577b95133f2e433d6d Mon Sep 17 00:00:00 2001
From: Love Hornquist Astrand <lha@h5l.org>
Date: Wed, 23 Dec 2009 17:07:16 +0100
Subject: [PATCH] Kerberos library tracing

---
 doc/setup.texi | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/doc/setup.texi b/doc/setup.texi
index f6d84824b..0aee37ef5 100644
--- a/doc/setup.texi
+++ b/doc/setup.texi
@@ -30,6 +30,7 @@ doing so.  It will make life easier for you and everyone else.
 * Using LDAP to store the database::
 * Providing Kerberos credentials to servers and programs::
 * Setting up PK-INIT::
+* Debugging Kerberos problems::
 @end menu
 
 @node  Configuration file, Creating the database, Setting up a realm, Setting up a realm
@@ -1096,7 +1097,7 @@ service@@host$ kinit --cache=/var/run/service_krb5_cache \
 @end example
 
 
-@node Setting up PK-INIT, , Providing Kerberos credentials to servers and programs, Setting up a realm
+@node Setting up PK-INIT, Debugging Kerberos problems, Providing Kerberos credentials to servers and programs, Setting up a realm
 @section Setting up PK-INIT
 
 PK-INIT is levering the existing PKI infrastructure to use
@@ -1485,3 +1486,19 @@ To enable Microsoft Smartcardlogin> for certificates in your Windows
 2000 CA, you want to look at Microsoft Knowledge Base Article -
 313274 ``HOW TO: Configure a Certification Authority to Issue
 Smart Card Certificates in Windows''.
+
+@node Debugging Kerberos problems, , Setting up PK-INIT, Setting up a realm
+@section Debugging Kerberos problems
+
+To debug Kerberos client and server problems you can enable debug
+traceing by adding the following to @file{/etc/krb5,conf}. Note that the
+trace logging is sparse at the moment, but will continue to improve.
+
+@example
+[logging]
+        libkrb5 = 0-/SYSLOG:
+@end example
+
+
+
+