You can set up the API trace tool to troubleshoot problems with
Kerberos and Generic Security Services API calls.
Network authentication service provides an API trace tool that allows an
administrator to create a file that contains all the Kerberos and Generic
Security Services (GSS) API calls. This tool allows you to troubleshoot more
advanced errors involving your own Kerberos enabled applications and errors
that might occur during network authentication service configuration and during
Kerberos ticket requests. Using environment variables you can create the tool
and have it generate a log file in a user's home directory.