Forum Discussion
NimbostratusCitrix iApp APM and Acticve Directory Account
Hello, I have an LTM with APM and Citrix is setup using the latest iApp. During setup (or reconfigure) in the iApp template under the APM portion it asks for an AD account with administrative permissions and that if the account becomes locked users will be unable to logon. It doesn tmention in any documentation though if this account needs to be part of domain admins group or not and what the account actually does. Any advice? Thanks.
4 Replies
It is used to bind and query for users ad account information and does need to be a user account that is part of the Citrix AD Domain (or a user that has rights to the Citrix AD domain).
In most cases leaving the user a part of Domain Users is just fine. If you want to have the F5 notify users of password expiration, I believe you need to give the f5 service account the right to reset users' passwords.
tolinrome_13817Thanks, any documentation on this, would be nice to actually see something F5 printed on it. Thanks again.
APM docs for 11.5 - check out the authentication and single sign on document.
