Forum Discussion
NimbostratusAPM - NTLM (multiple SSOs needed for Exchange)?
Have an issue with BIG IP 11.4.1 and Exchange 2010. The issue is I have a mac client that hits an APM enabled EWS/OA virtual server, Mac mail works 100% with the default NTLM auth check in the VPE. Outlook 2011 for Mac however, will consistently fail and no matter what I try for failback (even if succesfully authenticating to an LDAP source) it simply will not work with the NTLM auth check.
Anyone know why Outlook may appear to be working differently? I am passing through the username in format domain\username on the Mac mail which it picks up with NTLM auth headers, the moment I try the same format in Outlook 2011 it won't accept it.
The reason we need to pass DOMAIN\ is because we use different domains to connect to Exchange..It's been a real nightmare, I am finally able to get APM to work for all exchange services for all domains except these Outlook 2011 clients.
1 Reply
- I think you need to find out if outlook is trying to use some other form of authentication. Logs and captures would help. You can put the APM into debug logging mode for SSO to see how it evaluates incoming requests (if this is not a production site yet -- debug logging can slow things down.).
