Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 732 The situation should be improved significantly in 1.11 by r25854 (committed May 8). In your particular scenario, the bogus "Out of memory" error in the trace log would have been replaced with an OpenSSL error, for instance. There is still some information available through compile-time options but not present in the trace logs (including basically everything on the KDC side), so I wouldn't say we're done here. The main obstacle is representing OpenSSL types in string form without adding a large amount of code. (Also, I'm not sure I would want to dump Diffie-Hellman parameters into the trace logs before we have a way to enable super- verbose trace logging, since they're quite large and there are three of them.)