Kerberos Client trace
If you are trying to debug kerberos on client side there is not a lot of options for you.
You can position the KRB5_TRACE environment variable, standard system out may help you on this case!
KRB5_TRACE=/dev/stdout kinit emre [5753] 1494515577.97906: Getting initial credentials for emre@zenteric.com [5753] 1494515577.102972: Sending request (178 bytes) to zenteric.com [5753] 1494515577.103031: Resolving hostname freeipa.zenteric.com [5753] 1494515577.106909: Sending initial UDP request to dgram XX.XX.XX.XX:88 [5753] 1494515577.115721: Received answer (216 bytes) from dgram XX.XX.XX.XX::88 [5753] 1494515577.115744: Response was from master KDC [5753] 1494515577.115788: Received error from KDC: -1765328359/Additional pre-authentication required [5753] 1494515577.115817: Processing preauth types: 136, 133 [5753] 1494515577.115822: Received cookie: MIT kinit: Generic preauthentication failure while getting initial credentials |