Forum Discussion

Femi_132696's avatar
Femi_132696
Icon for Nimbostratus rankNimbostratus
Feb 19, 2014

Kerberos delegation Type, not available as option in Local Traffic Manager.

I am trying to configure Kerberos delegation using the Configuration utility, there does not however seem to be an option for 'Kerberos delegation' in the Authentication types.

 

Is special license required for this functionality?

 

regards,

 

Jemina

 

3 Replies

  • you should configure it in the SSO configurations tab, not in the AAA tab. There is no special license. Refer to Askf5 documentation (for ex http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementation/sol_kerberos_delegation.html?sr=35243894) as it's not straightforward (AD configuration)

     

  • Thanks again.

     

    I believe we need a license. I tried creating it via command line and got the following.

     

    01070356:3: KRB Delegate authentication feature not licensed. Client authentication is optional for us.

     

  • What you're looking at are remnants of the Advanced Client Authentication (ACA) module, which is no longer available. To do any Kerberos authentication, you need to license and provision the Access Policy Manager (APM) module.