Forum Discussion

bac81987_341588's avatar
bac81987_341588
Icon for Nimbostratus rankNimbostratus
Nov 30, 2018

APM SSO Kerberos Defaults to NTLM??

I currently have Kerberos single sign on configured successfully in APM. I was wondering why my Kerberos configuration is called "myconfigname"_ntlm_kerberos? Is it defaulting to NTLM in the event that Kerberos fails? If so, is there a way to set it up to use Kerberos only? Using NTLM is a STIG violation here.

 

application delivery
BIG-IP Access Policy Manager (APM)
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 30, 2018

    Need more information.

     

    • Was this configuration built by some iApp?
    • Do you have an NTLM SSO profile defined?
    • Are you talking specifically about server-side auth (SSO), vs. client-side auth (AAA)?
  • bac81987_341588's avatar
    bac81987_341588
    Icon for Nimbostratus rankNimbostratus
    Nov 30, 2018
    • Yes I did make it with an iApp
    • I do not have an NTLM SSO profile defined

    • I mean server-side auth (SSO)

       

      Thanks for the quick reply!

       

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 30, 2018

    Then this is just a naming convention of the iApp. If there's no NTLM SSO profile it's not going to failover to NTLM.