IBM Support

QMGTOOLS: Enable Kerberos Flight Recorder Trace (ENBKRBTRC)

Troubleshooting


Problem

The ENBKRBTRC (Enable Kerberos Flight Recorder Trace) command in QMGTOOLS allows the user to more easily set up the proper envar properties file to provide further debug related to kerberos (kinit, keytab, etc)
commands on the IBM i.  This command automates the instructions found at https://www.ibm.com/support/pages/kerberos-flight-recorder-trace

Resolving The Problem

1. If the QMGTOOLS toolkit has not yet been installed, you should refer to the following document for information on how to download and install the QMGTOOLS toolkit on your IBM i server. The following URL contains additional information: https://www.ibm.com/support/pages/mustgather-how-obtain-and-install-qmgtools-and-keep-it-current
Note: If you just downloaded the tool, this can be ignored. GO QMGTOOLS/MG and take option 12. Please make sure the build date is MARCH 2024 or later. If older than MARCH 2024, download the current version of QMGTOOLS by following the steps in https://www.ibm.com/support/pages/qmgtools-how-check-and-update-qmgtools
2. GO QMGTOOLS/MG and take option 7
image-20240320120632-2
3) Take option 2 for LDAP data collection
image-20240320120603-1
4) take option 3 for Kerberos Flight Recorder
image-20240320120716-3
5) Specify Enable to enable the trace
image-20240320120754-4
6) This creates the following:
image-20240320120821-5
The above menu options can be replaced with simply using the command:
 QMGTOOLS/ENBKRBTRC ENABLE(ENABLE)    
7) review the /home/<yourUserid>/envar file with DSPF '/home/<yourUserid>/envar'
The default properties show:
_EUV_SVC_MSG_LOGGING=STDOUT_LOGGING          
_EUV_SVC_MSG_LEVEL=VERBOSE                   
_EUV_SVC_STDOUT_FILENAME=/tmp/KRB_Trace.txt  
_EUV_SVC_DBG_MSG_LOGGING=1                   
_EUV_SVC_DBG_TRACE=1                         
_EUV_SVC_DBG=*.9                            
If support requests different properties, this file can be edited.  The default location is /tmp/KRB_Trace.txt for the userid, and if its quser, it is  /tmp/KRB_QUSER_Trace.txt
8) To disable
QMGTOOLS/ENBKRBTRC ENABLE(DISABLE)
image-20240320121232-6

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CGrAAM","label":"Single Sign On"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;7.5.0"}]

Document Information

Modified date:
20 March 2024

UID

ibm17144855

Page Feedback