Troubleshooting
Problem
The ENBKRBTRC (Enable Kerberos Flight Recorder Trace) command in QMGTOOLS allows the user to more easily set up the proper envar properties file to provide further debug related to kerberos (kinit, keytab, etc)
commands on the IBM i. This command automates the instructions found at https://www.ibm.com/support/pages/kerberos-flight-recorder-trace
Resolving The Problem
1. If the QMGTOOLS toolkit has not yet been installed, you should refer to the following document for information on how to download and install the QMGTOOLS toolkit on your IBM i server. The following URL contains additional information: https://www.ibm.com/support/pages/mustgather-how-obtain-and-install-qmgtools-and-keep-it-current
Note: If you just downloaded the tool, this can be ignored. GO QMGTOOLS/MG and take option 12. Please make sure the build date is MARCH 2024 or later. If older than MARCH 2024, download the current version of QMGTOOLS by following the steps in https://www.ibm.com/support/pages/qmgtools-how-check-and-update-qmgtools
2. GO QMGTOOLS/MG and take option 7
![image-20240320120632-2](/support/pages/system/files/inline-images/image-20240320120632-2.png)
3) Take option 2 for LDAP data collection
![image-20240320120603-1](/support/pages/system/files/inline-images/image-20240320120603-1.png)
4) take option 3 for Kerberos Flight Recorder
![image-20240320120716-3](/support/pages/system/files/inline-images/image-20240320120716-3.png)
5) Specify Enable to enable the trace
![image-20240320120754-4](/support/pages/system/files/inline-images/image-20240320120754-4.png)
6) This creates the following:
![image-20240320120821-5](/support/pages/system/files/inline-images/image-20240320120821-5.png)
The above menu options can be replaced with simply using the command:
QMGTOOLS/ENBKRBTRC ENABLE(ENABLE)
7) review the /home/<yourUserid>/envar file with DSPF '/home/<yourUserid>/envar'
The default properties show:
_EUV_SVC_MSG_LOGGING=STDOUT_LOGGING
_EUV_SVC_MSG_LEVEL=VERBOSE
_EUV_SVC_STDOUT_FILENAME=/tmp/KRB_Trace.txt
_EUV_SVC_DBG_MSG_LOGGING=1
_EUV_SVC_DBG_TRACE=1
_EUV_SVC_DBG=*.9
_EUV_SVC_MSG_LEVEL=VERBOSE
_EUV_SVC_STDOUT_FILENAME=/tmp/KRB_Trace.txt
_EUV_SVC_DBG_MSG_LOGGING=1
_EUV_SVC_DBG_TRACE=1
_EUV_SVC_DBG=*.9
If support requests different properties, this file can be edited. The default location is /tmp/KRB_Trace.txt for the userid, and if its quser, it is /tmp/KRB_QUSER_Trace.txt
8) To disable
QMGTOOLS/ENBKRBTRC ENABLE(DISABLE)
![image-20240320121232-6](/support/pages/system/files/inline-images/image-20240320121232-6.png)
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CGrAAM","label":"Single Sign On"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;7.5.0"}]
Was this topic helpful?
Document Information
Modified date:
20 March 2024
UID
ibm17144855