• Airlock Gateway

To investigate into Kerberos issues, start with the log messages described below.

• You must be logged in as an admin in the Airlock Gateway Configuration Center.

0. Test preparation on Airlock Gateway:
1. Go to: Application Firewall >> Reverse Proxy.
2. Edit the Web application's mapping.
3. Set the Operational mode to Integration.
4. Click on the Activate button.
5. The configuration has been updated successfully.

0. Test preparation - reproduce the issue:
1. After changing the Operational mode in Airlock Gateway to Integration, try to reproduce the issue.
2. The issue could be reproduced.

0. Test execution and verification:
1. Go to: Log & Report >> Log Viewer.
2. Click on Open to load saved searches.
3. Select the saved search Logs - All Airlock Logs.
4. Enter the search string below in the search field:

log_id:(WR-SG-SUMMARY or WR-SG-REJECT* or WR-SG-CAPI* or WR-SG-KERB*)

5. Start the investigation with this search string.
6. Verify the following:

There are no log messages with the log id WR-SG-SUMMARY the action below:

rejected

blocked

There are no log messages with a log id starting with the names below describe a problem with Kerberos:

WR-SG-REJECT

WR-SG-KERB

WR-SG-CAPI

7. There are no log messages indicating a Kerberos problem.