Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-3285: How to Collect Debug Logs from an OpenSSH Server

Centrify DirectControl ,  

17 September,16 at 12:33 AM

Applies to: All versions of Centrify-enabled OpenSSH

What steps are needed to enable Debug3 logging for SSH issues?

a) As root, run:

  cd /etc/centrifydc/ssh

  vi sshd_config

Uncomment and change the values from:
#SyslogFacility AUTH
#LogLevel INFO
SyslogFacility AUTH
LogLevel DEBUG3
b) Save the changes
c) Restart Centrify OpenSSHd from the /etc/init.d script

# /etc/init.d/centrify-sshd stop
# /etc/init.d/centrify-sshd start 
d) Turn on Centrify debug log and clear past log

# /usr/share/centrifydc/bin/addebug on
# /usr/share/centrifydc/bin/addebug clear
e) Reproduce the issue 
f) Revert back the changes made in Step a)

g) Run below to collect Host environment, the output file will be placed under /var/centrify/tmp/adinfo_support.tar.gz

# adinfo -t

h) Turn off Centrify debugging:

# /usr/share/centrifydc/bin/addebug off
i) Log entries are saved to: /var/centrify/tmp/adinfo_support.tar.gz

j)  If you are reproducing the issue with an ADuser, provide the adqueyr and dzinfo output, run the following:

# adquery user -A <ADusername> > /tmp/adquery.txt
# dzinfo <ADusername > /tmp/dzinfo.txt

Please send /var/centrify/tmp/adinfo_support.tar.gz, /tmp/adquery.txt, /tmp/dzinfo.txt

Additional Information
From man pages of sshd_config:
Gives the verbosity level that is used when logging messages from sshd.  The possible values are: QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2 and DEBUG3.  The default is INFO.

DEBUG and DEBUG1 are equivalent.  DEBUG2 and DEBUG3 each specify higher levels of debugging output.  

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.