Troubleshooting Kerberos Configuration
Increase the logging level
The first step in troubleshooting issues with Windows Authentication – Kerberos is to increase the logging level for the MSS authentication service.
<install-dir>/mss/server/microservices/auth-service/service.ymlfile and add this to the
- name: authsvc.logging.level value: DEBUG
Restart the server
If you are troubleshooting a cluster of MSS servers, we recommend that you increase the logging level on all servers in the cluster.
Locate log files
Once debug logging is enabled, you can find the log output for Kerberos and OAuth operations in
Other general information for the MSS authentication service is logged to the
auth-service.log file in the same location.
Identify specific issues
Check the possible causes for issues you may encounter.
|User is prompted for credentials
|User encounters the error message: “Unable to complete request at this time”
|User encounters the error message:
|User encounters the error message: “This site cannot be reached”
|Authentication takes a long time
|Reflection Desktop displays a “connection failed” error when trying to open a session