Forum Discussion
Poseidon1974
Cirrostratus
CirrostratusF5 APM-Kerberos -decrypt ticket
Hi , I am newbie on F5 APM, I use Kerberos authentication via keytab, and I have this error message in the SIEM logs, when user try to connect, also, the user sees a pop-up displayed to authentica...
Hi,
What instructions did you use to configure kerberos authentication? This knowlege article helps on debugging kerberos issues:
Troubleshooting issues with BIG-IP APM Kerberos end-user logon authentication (f5.com)
Maybe one thing to check: Make sure in the account properties in AD in the tab 'Account' the account option 'This account supports Kerberos 256 bit encryption' is enabled.
Poseidon1974Hi
Thanks for this reply , we use same account ( AD) for both SPN, for one URL it's OK with AES , but NOK for seconde URL, we haven't any issue with RC4 before
regards,
- Poseidon1974
Hi ,
As explained, I use a keytab file for two spns, only 1 SPN works with AES (without pop-up), however the other SPN does not (the user sees a pop-up displayed) to put his credentials n us 'have no problem with RC4 encryption.