Forum Discussion

morrie_63651's avatar
morrie_63651
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

kerberos

I am planning to use my new F5 LTM to load balance a number of components that are protected by Microsoft Active Directory - Kerberos. I am being told that the F5 device must join the Kerberos domain...
microsoft
partner
ccermak_13975's avatar
ccermak_13975
Icon for Nimbostratus rankNimbostratus
Oct 06, 2008
After the SPNs are created, what needs to be done within F5? We are using BusinessObjects application with AD/Kerberos auth. When I go direct using servername, application with SSO works fine. When we go in via the load balancer, using a URL that maps to a VIP, auth doesn't happen and get an error message within application. Persistance is turned on in F5, set to 1hr. Does the SPN account need to be given some rights in F5?