Kerberos SSO without APM

If you want Client request Kerberos ticket for the server SPN, you must configure reverse DNS name of VIP with SPN known by application server.

I configured for one customer APM Kerberos Constraint Delegation for Exchange Servers load balanced by LTM in a dedicated appliance

I had following flow: APM --> LTM --> Exchange

Kerberos ticket needed to be created for LTM VIP and known by Exchange

The LTM VIP was define with PTR exch.company.local in DNS IIS Exchange services were started as user with SPN HOST/exch.company.local