For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harshal_Patil_3's avatar
Harshal_Patil_3
Icon for Nimbostratus rankNimbostratus
May 08, 2019

F5 took long time to authenticate user using Active directory.

Just integrated AD in F5 Load Balancers for users authentication when accessing F5 LB. All user can able to authenticate successfully on LB but all LB took a long time to authenticate the user.   ...
BIG-IP
LTM
security
speachey's avatar
speachey
Icon for Cirrus rankCirrus
Oct 03, 2019

When we integrated AD LDAP authentication, we also saw delays logging in (several seconds). Despite specifying specific local "Host" LDAP servers, packet captures revealed traffic going to unexpected AD LDAP servers in our other datacenters. We found that globally disabling the use of LDAP referrals corrected the issue. See K17311: https://support.f5.com/csp/article/K17311

Anthony's avatar
Anthony
Icon for Nimbostratus rankNimbostratus
Dec 05, 2019

Glad I stumbled upon this post. I've been suffering with slow login response since integrating with a loadbalanced AD service, but adding REFERRALS no to the ldap.conf file has sorted it right out!

 

Thank you!