For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MS's avatar
MS
Icon for Nimbostratus rankNimbostratus
Mar 06, 2014

Kerberos: can't get TGT for HOST/abc@abc.com - Realm not local to KDC

Hi There,   I am trying to get the Kerberos constrained delegation to work, where the client authentication is done via certficate with the BIGIP. The BIGIP uses the further via Kerberos SSO to au...
BIG-IP Access Policy Manager (APM)
deployment
security
MS's avatar
MS
Icon for Nimbostratus rankNimbostratus
Mar 06, 2014

Yes i am parsing the username out of the subject.

 

as i just have the username to parse i assign the domain statically within the realm.

 

the syntax though looks fine within the debug, however it just complains that the realm is not local to KDC.

 

I have even tried to modify the /etc/krb5.conf to set the domain, but still the error persists.