=== modified file 'mandos-ctl'
--- mandos-ctl	2019-03-08 22:57:26 +0000
+++ mandos-ctl	2019-03-08 23:55:34 +0000
@@ -300,6 +300,12 @@
     """Abstract class for Actions for setting one client property"""
     def run_on_one_client(self, client, properties):
         """Set the Client's D-Bus property"""
+        log.debug("D-Bus: %s:%s:%s.Set(%r, %r, %r)", busname,
+                  client.__dbus_object_path__,
+                  dbus.PROPERTIES_IFACE, client_interface,
+                  self.property, self.value_to_set
+                  if not isinstance(self.value_to_set, dbus.Boolean)
+                  else bool(self.value_to_set))
         client.Set(client_interface, self.property, self.value_to_set,
                    dbus_interface=dbus.PROPERTIES_IFACE)
 
@@ -431,15 +437,22 @@
 
 class RemoveCmd(Command):
     def run_on_one_client(self, client, properties):
+        log.debug("D-Bus: %s:%s:%s.RemoveClient(%r)", busname,
+                  server_path, server_interface,
+                  str(client.__dbus_object_path__))
         self.mandos.RemoveClient(client.__dbus_object_path__)
 
 class ApproveCmd(Command):
     def run_on_one_client(self, client, properties):
+        log.debug("D-Bus: %s:%s.Approve(True)",
+                  client.__dbus_object_path__, client_interface)
         client.Approve(dbus.Boolean(True),
                        dbus_interface=client_interface)
 
 class DenyCmd(Command):
     def run_on_one_client(self, client, properties):
+        log.debug("D-Bus: %s:%s.Approve(False)",
+                  client.__dbus_object_path__, client_interface)
         client.Approve(dbus.Boolean(False),
                        dbus_interface=client_interface)
 
@@ -566,6 +579,8 @@
         help="Approve any current client request")
     approve_deny.add_argument("-D", "--deny", action="store_true",
                               help="Deny any current client request")
+    parser.add_argument("--debug", action="store_true",
+                        help="Debug mode (show D-Bus commands)")
     parser.add_argument("--check", action="store_true",
                         help="Run self-test")
     parser.add_argument("client", nargs="*", help="Client name")
@@ -693,8 +708,13 @@
 
     clientnames = options.client
 
+    if options.debug:
+        log.setLevel(logging.DEBUG)
+
     try:
         bus = dbus.SystemBus()
+        log.debug("D-Bus: Connect to: (name=%r, path=%r)", busname,
+                  server_path)
         mandos_dbus_objc = bus.get_object(busname, server_path)
     except dbus.exceptions.DBusException:
         log.critical("Could not connect to Mandos server")
@@ -713,6 +733,8 @@
     dbus_filter = NullFilter()
     try:
         dbus_logger.addFilter(dbus_filter)
+        log.debug("D-Bus: %s:%s:%s.GetManagedObjects()", busname,
+                  server_path, dbus.OBJECT_MANAGER_IFACE)
         mandos_clients = {path: ifs_and_props[client_interface]
                           for path, ifs_and_props in
                           mandos_serv_object_manager

=== modified file 'mandos-ctl.xml'
--- mandos-ctl.xml	2019-03-07 21:41:04 +0000
+++ mandos-ctl.xml	2019-03-08 23:55:34 +0000
@@ -2,7 +2,7 @@
 <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
 	"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
 <!ENTITY COMMANDNAME "mandos-ctl">
-<!ENTITY TIMESTAMP "2019-03-07">
+<!ENTITY TIMESTAMP "2019-03-09">
 <!ENTITY % common SYSTEM "common.ent">
 %common;
 ]>
@@ -69,6 +69,7 @@
 	  <arg choice="plain"><option>--dump-json</option></arg>
 	  <arg choice="plain"><option>-j</option></arg>
       </group>
+      <arg><option>--debug</option></arg>
       <group>
 	<arg rep='repeat' choice='plain'>
 	  <replaceable>CLIENT</replaceable>
@@ -162,6 +163,7 @@
 	</group>
       </group>
       <sbr/>
+      <arg><option>--debug</option></arg>
       <group choice="req">
 	<arg choice="plain"><option>--all</option></arg>
 	<arg choice="plain"><option>-a</option></arg>
@@ -180,6 +182,8 @@
 	  <arg choice="plain"><option>--remove</option></arg>
 	  <arg choice="plain"><option>-r</option></arg>
       </group>
+      <sbr/>
+      <arg><option>--debug</option></arg>
       <group choice="req">
 	<arg choice="plain"><option>--all</option></arg>
 	<arg choice="plain"><option>-a</option></arg>
@@ -194,6 +198,7 @@
 	<arg choice="plain"><option>--is-enabled</option></arg>
 	<arg choice="plain"><option>-V</option></arg>
       </group>
+      <arg><option>--debug</option></arg>
       <arg choice='plain'><replaceable>CLIENT</replaceable></arg>
     </cmdsynopsis>
     <cmdsynopsis>
@@ -507,6 +512,15 @@
       </varlistentry>
       
       <varlistentry>
+	<term><option>--debug</option></term>
+	<listitem>
+	  <para>
+	    Show debug output; currently, this means show D-Bus calls.
+	  </para>
+	</listitem>
+      </varlistentry>
+      
+      <varlistentry>
 	<term><option>--check</option></term>
 	<listitem>
 	  <para>