For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sonny's avatar
Sonny
Icon for Cirrus rankCirrus
Jul 28, 2015

kerberos and sharepoint

I recently joined a new group and they currently have an issue where the sharepoint site will display the home page fine once you auth. When go and click on any documents, it gives you a page cannot ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 28, 2015

So it looks like you're performing an LDAP query in the visual policy to get the sAMAccountName, and then using the SAM as the username source for the Kerberos SSO. So assuming the policy itself is always working, the next questions would be:

 

  1. Does it behave this way for internal AND external users, or just one or the other?

     

  2. When you say "prompt you to re-auth", are you talking about a dialog box for user/pass input?

     

  3. If you set APM SSO logging to debug, do you see any Kerberos-related errors in /var/log/apm when the issue occurs? Do you ever see "S4U ==> OK!" in that log?