For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
May 19, 2014

Getting error after creating NTLM machine account

After we created an NTLM machine account we are getting this error. When looking into AD we see the account have been created. Is there anything else we need to look at?   May 19 13:26:35 f5boxnam...
BIG-IP Access Policy Manager (APM)
deployment
security
TCP179_220919's avatar
TCP179_220919
Icon for Nimbostratus rankNimbostratus
Nov 21, 2016

Hi Andrei, If there is a firewall between the big-ip system and AD, make sure that TCP port 464 is opened along with ports 88 and 445.

 

Port 464 is the tricky one, and I spent one full day investigating these logon-failure logs.

 

Below are the recommended steps seq: - open tcp 464 in FW - delete ntlm-auth config - delete ntlm-machine account - restart eca "tmsh restart sys services eca" - recreate the ntlm machine account - recreate ntlm-auth config

 

TCP179