You can obtain the logs for IIS Authentication plug-in in the following ways:
To collect the debug logs using the Diagnostic Tool, perform the following steps:
Run DiagTool.exe (the tool must have Microsoft .NET Framework 3.5 installed).
Click Clear All in the Debug logs tab.
Click Enable.
Restart the system.
Reproduce your issue.
Run DiagTool.exe.
Click Save logs in the Debug logs tab.
Specify a file name and path.
Click Save.
Click Disable.
Click Clear All.
With the Diagnostic Tool, you can also check the network problems on a workstation, issues in connection between a workstation and DNS Server, and to get a list of the Advanced Authentication Servers that can be discovered. To do this, perform the following steps:
Run DiagTool.exe (the tool must have Microsoft .NET Framework 3.5 installed).
Switch to the Servers tab
In the Search settings you must specify FQDN in Domain and click Search.
A list of Advanced Authentication Servers is displayed.
If the list is not displayed, clear Use system DNS server and specify the IP address of your DNS server in DNS server and click Search again.
If you do not have the Diagnostic Tool, you can collect the debug logs manually. To collect the debug logs manually, perform the following steps:
Create a text file C:\ProgramData\NetIQ\Logging\config.properties.
Add a string to the file: logEnabled=True that ends with a line break.
Create a directory C:\ProgramData\NetIQ\Logging\Logs\.
Restart the system.
Repeat the scenario.
Compress the logs located in /Library/Logs/NetIQ/Logs/ into a zip file.
Change logEnabled=True to logEnabled=False in the file.