Kerberos library tracing
This commit is contained in:
@@ -30,6 +30,7 @@ doing so. It will make life easier for you and everyone else.
|
|||||||
* Using LDAP to store the database::
|
* Using LDAP to store the database::
|
||||||
* Providing Kerberos credentials to servers and programs::
|
* Providing Kerberos credentials to servers and programs::
|
||||||
* Setting up PK-INIT::
|
* Setting up PK-INIT::
|
||||||
|
* Debugging Kerberos problems::
|
||||||
@end menu
|
@end menu
|
||||||
|
|
||||||
@node Configuration file, Creating the database, Setting up a realm, Setting up a realm
|
@node Configuration file, Creating the database, Setting up a realm, Setting up a realm
|
||||||
@@ -1096,7 +1097,7 @@ service@@host$ kinit --cache=/var/run/service_krb5_cache \
|
|||||||
@end example
|
@end example
|
||||||
|
|
||||||
|
|
||||||
@node Setting up PK-INIT, , Providing Kerberos credentials to servers and programs, Setting up a realm
|
@node Setting up PK-INIT, Debugging Kerberos problems, Providing Kerberos credentials to servers and programs, Setting up a realm
|
||||||
@section Setting up PK-INIT
|
@section Setting up PK-INIT
|
||||||
|
|
||||||
PK-INIT is levering the existing PKI infrastructure to use
|
PK-INIT is levering the existing PKI infrastructure to use
|
||||||
@@ -1485,3 +1486,19 @@ To enable Microsoft Smartcardlogin> for certificates in your Windows
|
|||||||
2000 CA, you want to look at Microsoft Knowledge Base Article -
|
2000 CA, you want to look at Microsoft Knowledge Base Article -
|
||||||
313274 ``HOW TO: Configure a Certification Authority to Issue
|
313274 ``HOW TO: Configure a Certification Authority to Issue
|
||||||
Smart Card Certificates in Windows''.
|
Smart Card Certificates in Windows''.
|
||||||
|
|
||||||
|
@node Debugging Kerberos problems, , Setting up PK-INIT, Setting up a realm
|
||||||
|
@section Debugging Kerberos problems
|
||||||
|
|
||||||
|
To debug Kerberos client and server problems you can enable debug
|
||||||
|
traceing by adding the following to @file{/etc/krb5,conf}. Note that the
|
||||||
|
trace logging is sparse at the moment, but will continue to improve.
|
||||||
|
|
||||||
|
@example
|
||||||
|
[logging]
|
||||||
|
libkrb5 = 0-/SYSLOG:
|
||||||
|
@end example
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user