For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jul 07, 2015

If you want Client request Kerberos ticket for the server SPN, you must configure reverse DNS name of VIP with SPN known by application server.

 

I configured for one customer APM Kerberos Constraint Delegation for Exchange Servers load balanced by LTM in a dedicated appliance

 

I had following flow: APM --> LTM --> Exchange

 

Kerberos ticket needed to be created for LTM VIP and known by Exchange

 

The LTM VIP was define with PTR exch.company.local in DNS IIS Exchange services were started as user with SPN HOST/exch.company.local