F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Gulfam_219642's avatar
Gulfam_219642
Icon for Nimbostratus rankNimbostratus
Apr 14, 2016

APM SSO -Kerberos Decrypt integrity check failed

I just want to draw your kind attention towards the fact that We've setup APM and SSO already and everything is working fine. Also, we've setup Kerberos on the back-end servers and, again, all seems ...
BIG-IP
BIG-IP Access Policy Manager (APM)
kerberos
security
SSO
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
Apr 23, 2016

Hello,

 

The Kerberos delegation configuration may be invalid, what is your AD account configuration ?. Also, Can you confirm that the F5 APM is able to do reverse DNS resolution (required for kerberos deleg)

 

  • Gulfam_219642's avatar
    Gulfam_219642
    Icon for Nimbostratus rankNimbostratus
    Apr 27, 2016
    Thank you Yann Desmarest, all the configurations are correct. Yes F5 APM is able to do reverse DNS resolution.