Enable Kerberos Debug Logging

You can troubleshoot vRealize Orchestrator plug-in problems by modifying the Kerberos configuration file used by the plug-in.

The Kerberos configuration file is located in the /data/vco/usr/lib/vco/app-server/conf/ directory of the vRealize Orchestrator Appliance.

Procedure

1. Log in to the vRealize Orchestrator Appliance command line as root.
2. Run the kubectl -n prelude edit deployment vco-app command.
3. In the deployment file, locate and edit the -Djava.security.krb5.conf=/usr/lib/vco/app-server/conf/krb5.conf string.

   -Djava.security.krb5.conf=/usr/lib/vco/app-server/conf/krb5.conf -Dsun.security.krb5.debug=true

4. Save the changes and exit the file editor.
5. Run the kubectl -n prelude get pods command.
   Wait until all pods are running.
6. To monitor the Kerberos login, run the following command.

   tail -f /services-logs/prelude/vco-app/console-logs/vco-server-app.log

7. Alternatively, you can enable debug logging in the vRealize Orchestrator configurator by adding the sun.security.krb5.debug = true system property.