Turning on network debug logging
If a more detailed examination of the communication between the client and the server is necessary, turn on network debug logging to gather detailed information.
To turn on detailed network debug logging
- Stop the BMC Atrium Single Sign-On server.
- Edit the service definition.
- Restart the BMC Atrium Single Sign-On server.
- Attempt to log on using either the CAC card or a client certificate.
To edit the service definition in Microsoft Windows
- From the command prompt, change your working directory to <installationDirectory>\AtriumSSO\tomcat\bin.
- Run the following command:
tomcat6w.exe //ES//BMCAtriumSSOTomcat - On the Java tab, add the following Java Virtual Machine (JVM) specification to the Java Options input field:
-Djavax.net.debug=ssl,handshake - On the Logging tab, enter the file names for the stdout and stderr fields. For example, c:\stdout.txt and c:\stderr.txt.
- Click either OK or Apply.
To edit the service definition in UNIX
- From a shell window, change your working directory to <installationDirectory>/AtriumSSO/tomcat/bin.
- Edit the setenv.sh shell file and add the JVM directory to the existing CATALINA_OPTS definition:
-Djavax.net.debug=ssl,handshake
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*