Forum Discussion

mdsilva_266229's avatar
mdsilva_266229
Icon for Nimbostratus rankNimbostratus
Aug 03, 2016

401 Kerberos fallback not passing username and passwords

Hi I'm trying to set up a 401 auth.   On Negotiate, via Kerberos. If you hit the server on a PC on our company domain you will be logged in. (this works). On fail/fallback, login via LDAP using th...
BIG-IP Access Policy Manager (APM)
devops
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Aug 03, 2016

With kerberos logon, there is no access to a password so you can't use any further authentication mechanisms or SSO (aside from kerberos delegation).

 

You'd have to have another 401 response, or maybe a forms-based logon page after the fallback branch from kerberos logon. Then it should be fine.

 

  • mdsilva_266229's avatar
    mdsilva_266229
    Icon for Nimbostratus rankNimbostratus
    Aug 03, 2016

    Hi Lucas,

     

    Can you please elaborate a little?

     

    Basically what i want is, If your PC is on the company domain auto login, otherwise use ldap. Whats the best way to do this?

     

    Cheers Michael