Verifying the Kerebos configuration

To verify the Java Authentication and Authorization Service (JAAS) configuration and the keytab file, you can run a command using the java command from the JRE that Cognos Analytics is using.

Procedure

Run the following command from install_location/webapps/p2pd/WEB-INF/lib

java -cp xqeService.jar -Dcom.ibm.security.krb5.Krb5Debug=all -Dcom.ibm.security.jgss.debug=all com.cognos.xqe.util.KerberosSSOLoginHelper

The utility will attempt a login using the keytab file, and in the process will display the Kerberos debug output. At the end, it will display Helper login successful or Helper Login failed <error message>.