Forum Discussion

AN_168028's avatar
AN_168028
Icon for Nimbostratus rankNimbostratus
Dec 12, 2016

F5 Kerberos configuration for multiple Domains

For Kerberos Authentication on F5, do we need to use both AAA Kerberos and SSO Kerberos? I am running into the issue for kerberos SSO to work with two domains part of same forest with two way trust. ...
application delivery
BIG-IP Access Policy Manager (APM)
FI_2016_187929's avatar
FI_2016_187929
Icon for Nimbostratus rankNimbostratus
Feb 21, 2017

I am having the same issue regarding SSO, getting Kerberos: Failed to get ticket for user test@Domain2.com. Domain1 user works with no issues. I tried the suggestion posted in this discussion https://devcentral.f5.com/s/feed/0D51T00006i7X6eSAE to remove KDC from SSO configuration and edit the /etc/krb5.com file. However got the same result of Failed to get ticket. There are no detailed errors either to help troubleshoot.