Forum Discussion

adieoneill_2124's avatar
adieoneill_2124
Icon for Nimbostratus rankNimbostratus
Oct 26, 2015

Authentication with HP Protect

Good Afternoon, I was hoping someone might be able to help me with a problem I have.

 

I currently have a set up where my traffic will go from user to the F5, this then goes to the DC to get a kerberos ticket via APM. After this, the traffic is passed to the content server then back to the user. Since this design has been in use and proven, we have then had to introduce HP ProtectTools.

 

Since we have introduced this, I have the following problem;

 

When the user hits the F5 and is passed to the DC, the hashed passwords do not match as the HP ProtectTools provides a unique hash.

 

Is it possible for the F5 APM to somehow request the HP protect password hash? Or, does anyone have any other ideas how to tackle this issue?

 

Cheers

 

Adie

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
design
hp
LTM
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Oct 26, 2015

    Is this a problem in the frontend authentication or the kerb SSO? It's not very clear from your question. If you're not sure, review the /var/log/apm logs and see where the trouble is.