Troubleshooting SPNEGO issues on WebSphere Application Server

Edit online

If you encounter issues with SPNEGO authentication in your web clients or Eclipse clients, enable SPNEGO trace logging on IBM® WebSphere® Application Server.

Before you begin

Important: In addition to completing the next steps to enable SPNEGO trace logging on WebSphere Application Server, instruct client users to enable tracing. For more information, see Collecting debug information for ELM client authentication issues with Kerberos/SPNEGO SSO.

Procedure

  1. Open the WebSphere Application Server Integrated Solutions Console.
  2. Click Troubleshooting > Logging And Tracing > server_name > Diagnostic Trace Service/Configuration > Change Log Detail Levels.
  3. In the Change log detail levels section, in the text field, type the following string. 
    com.ibm.ws.security.spnego.*=all

Results

Traces are written to the trace.log file. Other details are written to the SystemOut.log file.

What to do next

For information about issues that you might encounter when you use SPNEGO authentication and possible solutions, see SPNEGO troubleshooting tips.