For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Moshiko_Kochva's avatar
Moshiko_Kochva
Icon for Nimbostratus rankNimbostratus
Aug 21, 2018

APM Kerberos Authentication - Logon agent instance is not available to be scheduled

Hi,   I have an APM policy that receive user credentials and authenticate them with Kerberos authentication.   After receiving the payload the APM says (on var/log/apm) "AD module: Logon agent...
application delivery
BIG-IP Access Policy Manager (APM)
Moshiko_Kochva's avatar
Moshiko_Kochva
Icon for Nimbostratus rankNimbostratus
Aug 22, 2018

Update: after adding a Debug logging policy on the relevant APM policy I found that the password for the Active Directory user account that I have tried to authenticate has been expired. It's to bad that the APM doesn't log that in the default logging policy.

 

AD agent: Auth (logon attempt:0): Domain password has been expired and must be changed for 'User@Domain.com'

 

After resetting the user password the authentication succeeded.

 

Thanks Kevin.