{"componentChunkName":"component---src-templates-manual-template-tsx","path":"/manuals/client-user/64/starting-broker-debugging.html","webpackCompilationHash":"d1750f6cc413894a8b5c","result":{"data":{"promoBlocks":{"edges":[{"node":{"contentful_id":"47glnSpWzXeFylv2vfQEF8","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"7KIOfSfgwJnCXuvRN6CfrP","textContent":"Standing privileges are a risk with PAM","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"nodeType\":\"document\",\"data\":{},\"content\":[{\"nodeType\":\"paragraph\",\"content\":[{\"nodeType\":\"text\",\"value\":\"Start your journey towards a just-in-time (JIT) model with zero standing privileges (ZSP). Read 'Remove Standing Privileges Through a Just-In-Time PAM Approach' by Gartner , courtesy of SSH.COM.\\n \\n\",\"marks\":[],\"data\":{}}],\"data\":{}}]}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"19EUesynV2Z7HHcuJk0BAS","content":"Download Gartner research","internalLink":null,"externalLink":"https://info.ssh.com/gartner_research_privileged_access_management","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"2ClylmBswcfDx4XdO7NTmL","title":"ICON Gartner ZSP","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png","contentType":"image/png"},"fluid":{"aspectRatio":1,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=750&h=750&q=50 750w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1500&h=1500&q=50 1500w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1601&h=1601&q=50 1601w","sizes":"(max-width: 3000px) 100vw, 3000px"},"fixed":{"width":3000,"height":3000,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":""}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block2","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}},{"node":{"contentful_id":"6dfNaA1UlY4bADKQk6awhs","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"49Tb2wSR21P5C2cpcgMZ3","textContent":"Get Multi-cloud PAM software - for free!","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"data\":{},\"content\":[{\"data\":{},\"content\":[{\"data\":{},\"marks\":[],\"value\":\"PrivX® Free replaces your in-house jump hosts and combines your AWS, GCP and Azure access into one multi-cloud solution.\\n \\n\",\"nodeType\":\"text\"}],\"nodeType\":\"paragraph\"}],\"nodeType\":\"document\"}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"1dmQ13jyyZ46ID07eVNVFb","content":"PrivX Free","internalLink":null,"externalLink":"https://info.ssh.com/privx-free-access-management-software","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"4UUYdjING8micwZQur5o6d","title":"ICON computer (search)","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/4UUYdjING8micwZQur5o6d/1b378a0f4646075c7a4788f1afffbabe/ICON_computer__search_.svg","contentType":"image/svg+xml"},"fluid":{"aspectRatio":null,"src":null,"srcSet":null,"sizes":null},"fixed":{"width":null,"height":null,"src":null,"srcSet":null}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block1","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}}]}},"pageContext":{"isCreatedByStatefulCreatePages":false,"body":"
\"SSH\"
\"Home\" \"Prev\" \"Up\" \"Next\"  

Setting Connection Broker to Debug Mode

The Connection Broker is a component included in Tectia Client. \nThe Connection Broker handles all cryptographic operations and \nauthentication-related tasks for Tectia Client and the command-line \ntools sshg3, scpg3, and sftpg3.

If the verbose level output explained in Gathering Basic Troubleshooting Information does not solve your problem, set the\n existing running Broker to debug mode. Existing open connections will remain up and running,\n which is relevant on multiuser systems or when there are lots of automated scripts running at\n the same time. You will also get a debug log from new connection attempts.

To set the Connection Broker to debug mode, follow these instructions:

  1. Open a shell (on Unix) or command prompt window (on Windows).

  2. If you already have an existing Connection Broker, skip this step. If you do not have \nan existing Connection Broker, run the following command:

    $ ssh-broker-g3

  3. Set the Connection Broker to debug mode by running the following command:

    $ ssh-broker-ctl debug --log-file=<logfile> <debug-level>

    In the command:

    • logfile specifies the file to which the debug \noutput will be directed

    • debug-level is an integer from 0 (no debug info) to 99 that \nspecifies the desired amount of debug information.

      \"[Note]\"Note

      The recommended debug levels are 1-9. The higher the number, \nthe more detailed the troubleshooting output will be, and the more the \ndebugging will affect performance.

    On Windows, you can set the debug mode also in the \nLogs view in the Tectia Connection Status window. \nTo open the Tectia Connection Status window, right-click the \nTectia icon in the Windows taskbar notification area and \nselect Status.

    \"Setting

    Figure 7.2. Setting the Connection Broker's debug mode on Windows


    The following example command sets the Connection Broker debug mode to\nlevel 4 and outputs the debug information to a log file named \nbroker.log:

    $ ssh-broker-ctl debug --log-file=broker.log 4

  4. Connect to a server using one of the clients:

    $ sshg3 user@host

  5. View the debug information for the connection in the \nbroker.log file.

On Unix, you can display the debug output also by using the command \nline tools with argument -D. For example, the following command \nwill display the debug output with a debug level 2:

$ sftpg3 -D2 user@host

On Windows, besides the command line tools, you can display the debug\noutput also in the Tectia Connection Status window.

\"[Note]\"Note

After you have collected the debug output, remember to disable \nTectia Client's debug mode, since debugging slows down the performance.

On Unix and Windows, the debug mode is disabled with the following command:

$ ssh-broker-ctl debug --clear

On Windows, the debug mode can be also disabled by setting the debug level back\n to 0 in the Tectia Connection Status window, as shown in Figure 7.3

\"Disabling

Figure 7.3. Disabling the Connection Broker's debug mode on Windows


\"Home\" \"Prev\" \"Up\" \"Next\"  

\n Copyright 2020 SSH Communications Security Corporation
\n This software is protected by international copyright laws. All rights reserved.
Contact Information

","head":"Setting Connection Broker to Debug Mode","url":"/manuals/client-user/64/starting-broker-debugging.html"}}}