Exchange ActiveSync published via APM, client certificates and kerberos sso mixes up kerberos tickets

Hi, thank you for your reply. I added the irule because otherwise IPhone requests threw errors in apm. I will give it a try with the iapp and report back. Best regards Mark

Hi, I tried the iapp but this didn't work either. APM threw the following error because of the iphone option header: (null):Common:00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: hud_access_handler, Line: 2525 2016-04-25 10:05:16 But I replaced the old irule with _sys_APM_ExchangeSupport_OA_BasicAuth and now it seems to work. The only drawback is that the first time the users get a basic auth window and have to enter anything. Afterwards the kerberos SSO auth with certificate takes place. Subsequent requests work fine. I haven't found the time yet to look into the irule to see if I can comment out the 401 basic auth. Thank you Best regards Mark

Hi, We regularly deploy the iApp without any issues. The use of an Exchange profile and customize the VPE to fit our needs and that works. We don't attach any irules to the VS.