Forum Discussion

morrie_63651's avatar
morrie_63651
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

kerberos

I am planning to use my new F5 LTM to load balance a number of components that are protected by Microsoft Active Directory - Kerberos. I am being told that the F5 device must join the Kerberos domain...
microsoft
partner
khaledmasmoudi_'s avatar
khaledmasmoudi_
Icon for Nimbostratus rankNimbostratus
Mar 15, 2010
Hi,

 

 

Has anyone tried to implement Kerberos delegation using the default irule associated to the Kerberos profile?

 

 

The F5 doesn't seem to handle the user credentials provided by the browser:

 

 

Mar 15 16:27:24 DOULBF6-RC tamd: pam_krbdelegate(mod_auth_kerb): gss_acquire_cred() failed: Unspecified GSS failure. Minor code may provide more information (No such file or directory)

 

Mar 15 16:27:24 DOULBF6-RC tamd: pam_krbdelegate(mod_auth_kerb): Failure to extract credentials from client. Denying user.

 

 

Thanks in advance for your help.