java - How to see kerberos authentication logs in JAAS/GSSAPI web application deployed on tomcat(through eclipse)

Question

I have been trying to figure out how to see all the kerberos/JAAS logs behind the scenes of the JAVA application deployed on tomcat through eclipse. I have been searching on the internet and somehow none of the solutions been working for me. I have tried various things:

1. Set -Dsun.security.krb5.debug=true through both the Environment Variable and VM arguments in the run configurations for tomcat in the eclipse.
2. I am not able to find where the log file is generated
3. Also, added KRB5_TRACE in the Environment Variable to point to an arbitrary file. But no logs are getting printed there as well
4. Added debug=true in the JAAS.conf file, but the logs there are getting printed on eclipse console and aren't much helpful.

What I intend to see is the complete behind the scene steps for what is happening:

1. How the initial credentials are fetched
2. Is the ticket being cached or not
3. Is the cached ticket being used when the same user is trying to login? etc. etc.

Please Note:- I can only manipulate the conf files, the code changes are not possible. What is that am I missing?

---

I have also tried setting -Dsun.security.jgss.debug=true as suggested in this question's answer

---

After setting debug=true in jaas.conf file, I could only see following logs:

[Krb5LoginModule] user entered username: admin@somedomain.test [Krb5LoginModule]: Entering logout [Krb5LoginModule]: logged out Subject

Are these the only logs available, or I could get to see more detailed logs as well?

question from:https://stackoverflow.com/questions/65617796/how-to-see-kerberos-authentication-logs-in-jaas-gssapi-web-application-deployed

Answer 1

Waitting for answers