F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Apr 01, 2021

Kerberos ticket not working

Kerberos ticket is not processed fully. My web application does not show in browser. It is just waiting. The APM Debug logs looks like this. Any suggestion or recommendation. I don't see any error. ...
BIG-IP Access Policy Manager (APM)
security
spalande's avatar
spalande
Icon for Nacreous rankNacreous
Apr 02, 2021

It appears you are trying to achieve the server side Kerberos SSO. From the error it appears DC is responding back with 401 response. Please check if you have correctly followed all the steps as per below

 

https://devcentral.f5.com/s/articles/apm-cookbook-single-sign-on-sso-using-kerberos

 

  • create new service account
  • set SPN and set it's properties
  • reverse DNS
  • create Kerberos SSO profile using service account credentials
  • Setup VPE policy using SSO credentials mapping.

 

If you are still getting error analyse the wireshark capture and APM logs again. Try to get help from your active directory team also to troublesoot