For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Osiris0815_9742's avatar
Osiris0815_9742
Icon for Nimbostratus rankNimbostratus
Jun 09, 2016

Issue with Keberos Authentication - Load Balancing several LDAP servers

Hi all,   at the moment we moved our LDAP servers behind the LTM. I am using a single Virtual IP which is listening to all needed LDAP ports.   Everything is working fine except the Kerberos au...
application delivery
BIG-IP
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 10, 2016

Understood, but application traffic and Kerberos traffic are generally different things. In order to present a Kerberos ticket in an application request, a client must separately communicate to the KDC (usually on TCP or UDP port 88) to get that ticket. My question is why is your client trying to go through an LTM VIP to get to the KDC? The client should be local to the KDC.