Forum Discussion

Julio_Navarro's avatar
Julio_Navarro
Icon for Cirrostratus rankCirrostratus
Mar 24, 2015

401 and Kerberos

Hello;

 

I have following pass-through set and working fine using this link as the guideline: https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/9.html

 

I have a VIP with the following Access Policy:

 

.....->HTTP 401 Response -> Negotiate -> Kerberos Auth -> resources...->

 

Everything is working fine. User can open a browser and gets authenticated based on the domain/kerberos authentication. BUT, if a open a new instance of the browser (lets say I am using IE), 401 Response will not make the pass-through and ask for credentials.

 

Its like of the browser don't let another 401 session to occurred, maybe?

 

Please advise

 

Thank you

 

J

 

BIG-IP Access Policy Manager (APM)
security

1 Reply

  • Thibaut_91745's avatar
    Thibaut_91745
    Icon for Nimbostratus rankNimbostratus
    Mar 27, 2015

    Hey,

     

    It's not the same thing that I used to have (I used to have IE ask for my credentials when logging out and laucnhing a new session in the same tab). This only happened on IE so I looked at the IE settings and found this : http://support.microsoft.com/en-us/kb/2749007 Adding the new key in the registery solved my problem, hoped it will you.