Forum Discussion
jban_198207
Cirrus
Oct 26, 2017Kerberos SSO resource and account not in the same domain
Hi,
We create F5 Service Account in Domain1 as
-Host/
-Users are in: domain1.local
Web resource is in domain2.local with SPN let say: HTTP/webresource.domain2.local
When I test with kinit a...
- Nov 04, 2017
Changed -> Dns_lookup_kdc = true Analaysing packet capture answer was found.
USERDOMAIN.INTERNAL was child domain of INTERNAL and INTERNAL KCD was not allowed on firewall. after allowing INTERNAL KCD, stuff started to work.
jban_198207
Cirrus
Nov 04, 2017Changed -> Dns_lookup_kdc = true Analaysing packet capture answer was found.
USERDOMAIN.INTERNAL was child domain of INTERNAL and INTERNAL KCD was not allowed on firewall. after allowing INTERNAL KCD, stuff started to work.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
