For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rabbit23_116296's avatar
Rabbit23_116296
Icon for Nimbostratus rankNimbostratus
Feb 27, 2014

Check your DNS. Each domain needs to be reverse resolvable. If you can't configure that you can specify the Kdc Servers in /etc/krb5.conf

 

Then is the userprincipalname ad attribute configured correctly? Should be host/svc_f5.foo.bar.com@foo.bar.com

 

Setting it up that will then Kerberos delegation will work with all trusted forests and constrained delegation within the bar.com forest