You can set up the API trace tool to troubleshoot problems with Kerberos and Generic Security Services API calls.
Network authentication service provides an API trace tool that an administrator can use to create a file that contains all the Kerberos and Generic Security Services (GSS) API calls. With this tool, you can troubleshoot more advanced errors involving your own Kerberos-enabled applications and errors that might occur during network authentication service configuration and during Kerberos ticket requests. Using environment variables, you can create the tool and have it generate a log file in a user's home directory.
The home directory must exist before completing these steps.