Forum Discussion

scorpa_121336's avatar
scorpa_121336
Icon for Nimbostratus rankNimbostratus
Jul 18, 2013

APM and Active directory forest auth

Hello.   I couldn't find any information about how to specify wich KDC Bigip should use to auth users from some realm,     So problem is:   In APM settings under Active directory serve...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 31, 2013
Assuming you're talking about server side Kerberos (SSO), I can think of at least TWO options:

 

 

1. Modify /etc/krb5.conf - set dns_lookup_realm and dns_lookup_kdc both to false and specify the KDCs in the [realms] section.

 

 

2. If you have the DNS services module licensed, you should be able to point the system-wide DNS server setting at a VIP (DNS profile applied) and filter the incoming DNS responses, or statically respond if the values never change.