Forum Discussion

prak_sh_237573's avatar
prak_sh_237573
Icon for Nimbostratus rankNimbostratus
Feb 09, 2016

How to configure 2 forest in Bigip APM

Hello friends,   I need some help regrading this requirement in bigip APM:   one of our customer is using bigip APM for exchange services. previously they configured one forest ADs in APM and t...
application delivery
BIG-IP Access Policy Manager (APM)
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 09, 2016

Ahh, okay. So you're doing NTLM authentication on the client side and Kerberos authentication (SSO) on the Exchange side. From the logs it looks like client side NTLM is working:

Session variable 'session.sso.token.last.username' set to 'w.test'

So it may just be a matter of Kerberos SSO issues between the two domains. Is "w.test" indeed a user in DOMAIN2? Can you put APM SSO in debug mode and try again?