ASM - Kereberos protocol transition

Hi Kevin,

 

 

many thanks for your fully detailed answer.

 

Did a lot of testing with F5 support in the end and the problem was the sequence of Ciphers in my krb5.conf file.

 

[libdefaults]

 

default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5

 

default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5

 

 

initialy I added the rc4-hmac at the end, because of the AD Domain Policy.

 

 

BTW: Transition works only within a single AD Domain.

 

 

Thanks

 

Jens