For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jban_198207's avatar
jban_198207
Icon for Cirrus rankCirrus
Oct 26, 2017
Solved

Kerberos SSO resource and account not in the same domain

Hi,   We create F5 Service Account in Domain1 as -Host/ -Users are in: domain1.local Web resource is in domain2.local with SPN let say: HTTP/webresource.domain2.local   When I test with kinit a...
application delivery
BIG-IP Access Policy Manager (APM)
  • jban_198207's avatar
    jban_198207
    Nov 04, 2017

    Changed -> Dns_lookup_kdc = true Analaysing packet capture answer was found.

     

    USERDOMAIN.INTERNAL was child domain of INTERNAL and INTERNAL KCD was not allowed on firewall. after allowing INTERNAL KCD, stuff started to work.

     

Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 27, 2017

Hi,

 

can you share the kerberos SSO configuration?

 

did you edit /etc/krb5.conf file?