For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

M_Petr's avatar
M_Petr
Icon for Altostratus rankAltostratus
Nov 21, 2019

Configuring APM Client Side NTLM Authentication

Hi.

I want to Configuring APM Client Side NTLM Authentication.

I red this article https://devcentral.f5.com/s/articles/configuring-apm-client-side-ntlm-authentication,

and I have a question - What minimum rights should have "admin user"?

 

Thanks.

 

BIG-IP Access Policy Manager (APM)
security

3 Replies

  • M_Petr's avatar
    M_Petr
    Icon for Altostratus rankAltostratus
    Nov 22, 2019

    Ok About rights I understood. But I have another questions.

    F5 greates new mashine account in a directry "Computers". How change this path to another folder? (We can't wirte to the folder "Computers".

  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Nov 26, 2019

    Hello M.Petr,

     

    I do not believe you can change this directory. Are you configuring this with an Admin account? Why can you not add the APM to this directory?

  • M_Petr's avatar
    M_Petr
    Icon for Altostratus rankAltostratus
    Nov 27, 2019

    Hi,

    Because security policy prohibits. Only for specific directory something like - Computers/folder/folder/F5folder/.

    But never mind, our security policy also prohibits to use of SMBv1.

    NTLM auth. dosn't work without SMBv1.

    So, We will try kerberos auth.

     

    Thanks.