For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CX_280703's avatar
CX_280703
Icon for Nimbostratus rankNimbostratus
May 07, 2017

Invalid Session ID. Your session may have expired - during kerberos auth

I have an IdP setup that is doing client side kerberos auth before then sending on a SAML token to an SP. I have an intermittant issue were sometimes using the kerberos auth It seems to fail and send...
BIG-IP Access Policy Manager (APM)
idp
kerberos
saml
security
CX_280703's avatar
CX_280703
Icon for Nimbostratus rankNimbostratus
Oct 22, 2018

Hi Nolan,

 

So it came down to 3 things, Kerberos, NTLM and Session Rotation. If I stopped using any one one of these 3 then my problem went away. in the end I needed both Kerberos and NTLM setups and so F5 Support agreed that the only option was to turn off the session rotation. Since that day I never saw the issue again.

 

Note this was in APM 11.6.2 I have not tested since upgrading to later versions but would be interesting to see if it was resolved.