Kerberos Logging

Question

Hello,How do I check the location where Kerberos is writing logs?I checked the location which is mentioned in krb5.conf (default = FILE:/var/log/krb5libs.logkdc = FILE:/var/log/krb5kdc.logadmin_server = FILE:/var/log/kadmind.log) however the log files mentioned in this location are empty. Am I checking an incorrect location? Secondly logs on Hue Server & KT renewer is not getting updated / current. Any help/guidance is appreciated.

araujo · Accepted Answer

@wert_1311 ,

Kerberos issue can be a hard thing to troubleshoot. I've done a LOT of troubleshooting involving Kerberos and I still find myself stumped at times.

What's in the krb5kdc.log rarely matters. The best way to find out what's going on is to look at the client log.

Enable debug logging for your application and ensure you also toggle debug mode for the Kerberos modules with -Dsun.security.krb5.debug=true for your application.

Look at and read the logs carefully, and google a lot 🙂 Kerberos debug logs are rarely intuitive.

If you can share some of that here it might help us find some clues as to what is going on. If you can't, I understand.

Good luck.

André

araujo · Answer

Hi @wert_1311 ,

How do I check the location where Kerberos is writing logs?
I checked the location which is mentioned in krb5.conf (default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log) however the log files mentioned in this location are empty. Am I checking an incorrect location?

Can you explain what you are trying to verify/check?

What sort of Kerberos information are you looking for? What kind of problem are you troubleshooting?

Secondly logs on Hue Server & KT renewer is not getting updated / current.

Do you mean that the logs have not been updated for a while? Is the disk full?

What's the location of the logs that you're looking at?

Have you double-checked that you are checking the logs in the correct hosts, where the Hue Server and KT Renewer is deployed to?

Cheers,

André

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.