Forum Discussion

Nimbostratus

Jan 19, 2016

Kerberos delegation issues when F5 used only for the load balancing

We have intranet application with Kerberos authentication. To make application highly available, we are using the F5 for load balancing. Application without F5 works without any issues. But when we use the F5, application authentication fails. We would like to know whether F5 works with Kerberos delegation without using APM module. If it works could you please let us know the configuration/SPNs required to Setup for VIP.

BIG-IP

security

1 Reply

Chris_Grant
Employee
Jan 19, 2016
If you wish to use Kerberos through the BigIP you must have APM, yes. Previously you could use the Advanced Client Authentication Module, but this is now end of life. If you have a Best license you are already licensed to use the APM module, otherwise you should contact your sales team about purchasing APM.