Forum Discussion
F5 APM AES256 in keytab for Kerb Auth failed
Hi Poseidon1974 ,
Please refer the following articles
https://my.f5.com/manage/s/article/K01716018#CreateKeytabKtpass
Impact of procedure: Using the ktpass command with certain parameters on a domain controller may modify the AD service account. F5 recommends that you perform this procedure during a scheduled maintenance window for the specific service.
Important: The following command uses AES256-SHA1 encryption. You must therefore select the This account supports Kerberos AES 256 bit encryption check box for the user you created in step 2.
Use these commands
ktpass
ktutil
rkt
wkt
K24065228: Troubleshooting issues with BIG-IP APM Kerberos end-user logon authentication
https://my.f5.com/manage/s/article/K24065228
https://my.f5.com/manage/s/article/K24065228#VerifyEncryption
K73872229: Configure BIG-IP APM KDC validation in AD authentication
https://my.f5.com/manage/s/article/K73872229
K01716018: Configuring Kerberos end-user logon authentication for multiple applications by merging keytab files
https://my.f5.com/manage/s/article/K01716018
https://my.f5.com/manage/s/article/K24065228
K17371: BIG-IP APM may fail to authenticate when Kerberos AAA servers have different keytab files
https://my.f5.com/manage/s/article/K17371
https://my.f5.com/manage/s/article/K000130298
https://my.f5.com/manage/s/article/K18315582
HTH
Hi,
Thanks for your reply , will check this link,
Poseidon;
- Poseidon1974Oct 10, 2023Cirrostratus
HI,
i have this error :
LOCAL kvno 23 enctype aes256-cts found in keytab but cannot decrypt ticket
Can you help ?
Thanks
- Poseidon1974Oct 12, 2023Cirrostratus
Any help ?
- Poseidon1974Nov 27, 2023Cirrostratus
Hi,
Any update ?
Thanks
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com