For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MrGlass_204919's avatar
MrGlass_204919
Icon for Nimbostratus rankNimbostratus
Jul 30, 2015

Error creating machine acc/APM as a gateway

Hi all,

 

I am trying to create APM as Gateway for RDP clients: https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-application-access-11-6-0/5.html

 

During one of the steps you are required to create a machine account. I have followed all the steps in order however i am getting the following error: "Could not connect to domain controller for realm XXXX. Domain join for YYYYY failed: Cannot contact any KDC for realm xxx, principal name: xxx (-1765328228).

 

Any one know why the error is caused/how i can resolve this?

 

Thanks!

 

7 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 30, 2015

    Did you install HF4 or HF5?

     

    I had the same issue in version 11.6.0 HF1. resolved after HF4.

     

  • MrGlass_204919's avatar
    MrGlass_204919
    Icon for Nimbostratus rankNimbostratus
    Jul 30, 2015

    Hi Stanislas,

     

    Thanks for your answer. We have HF4 installed and are still seeing tihs error.

     

    Kind regards, Mr.,

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Aug 11, 2015

    It seems like the configured domain controller is not reachable(DNS issue or IP reachability).

     

    Try leaving domain controller empty and check nslookup from APM for SRV record for _kerberos._udp.domain.com with the DNS server configured on APM.

     

  • MrGlass_204919's avatar
    MrGlass_204919
    Icon for Nimbostratus rankNimbostratus
    Aug 12, 2015

    Hi Kunjan,

     

    I will try this out and paste the results here. I am almost sure we did check the dns reachability from the APM but yo0u never konw.

     

    Thanks.