Forum Discussion
f5learn_164388
Nimbostratus
Nimbostratuskerberos seamless login issue
Hello,
We are trying to get seamless login working for the laptop users in our environment. Here is the policy we have currently which seems to be working with following issues.
1) If we ...
Yann_Desmarest_
Nacreous
NacreousAPM retain the kerberos ticket that you already played and fallback to a 401 prompt as it doesn't allow to replay the same kerberos token multiple times. You have to clear your Authentication cache on the Browser side. We workaround this behavior by injecting a javascript code within the response to the client. Here is an example of javascript function that work : void(document.execCommand('ClearAuthenticationCache').
The issue is that Internet Explorer send the same kerberos token every time until you close your browser or remove the cache. And APM doesn't support it...
f5learn_164388Nimbostratus
NimbostratusThanks, Yann for answering this post. We will take a look at this workaround. The only concern is it clears the cache for everything.
Also, going through the links below it looks like there is success for Kerberos seamless. I am little surprised that all these have to deal with the workaround. Or is APM accepting same token a bug that has been fixed in later versions. Currently we are on 11.5.1. Any insight is appreciated.
https://devcentral.f5.com/s/feed/0D51T00006i7R5xSAE
https://devcentral.f5.com/s/feed/0D51T00006j3kPlSAI
Thanks,
ski
