Forum Discussion
f5learn_164388
Nimbostratus
Nimbostratuskerberos seamless login issue
Hello,
We are trying to get seamless login working for the laptop users in our environment. Here is the policy we have currently which seems to be working with following issues.
1) If we ...
f5learn_164388Nimbostratus
NimbostratusMichael, i think we got past the pop up thing. Its strange that once the reverse DNS lookup entry was added it took care of the delay and also the popup. Now we are seeing something different. Most of the times the seamless thing is working but once in a while we get a page cannot be displayed. We put some message boxes in place and see that the below highlighted path is taken and it just fails with a "page cannot be displyed" message in the browser. When we took the packet captures we see that there is a ack,rst from server and nothing happens. On the apm logs we see that "session is deleted due to user inactivity". Is there something else we are missing?
Michael__Nimbostratus
NimbostratusHi,
the PTR entry for the SPN is mandatory or at least a host entry (on the APM) to get the Kerberos auth with the F5 working
About the RST
Could you set the Access Policy Logging to Debug (System ›› Logs : Configuration : Options) and check the log output (/var/log/apm) for a reason ?!
