Forum Discussion

morrie_63651's avatar
morrie_63651
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

kerberos

I am planning to use my new F5 LTM to load balance a number of components that are protected by Microsoft Active Directory - Kerberos. I am being told that the F5 device must join the Kerberos domain...
microsoft
partner
Ravi_Rajan_7549's avatar
Ravi_Rajan_7549
Icon for Nimbostratus rankNimbostratus
Sep 05, 2008
Hi,

 

 

Yes F5 can do kerberos, but you cannot join this device to the AD domain.

 

 

Instead you need to create SPNs (service principal names) for the HTTP services mapping to a particular domain user ids.

 

 

We have kerberos single sign on working for IIS, weblogic, SAP enterprise portal without any issues.

 

 

Let me know if you need more info.

 

 

Regards,

 

Ravi