Forum Discussion

morrie_63651's avatar
morrie_63651
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

kerberos

I am planning to use my new F5 LTM to load balance a number of components that are protected by Microsoft Active Directory - Kerberos. I am being told that the F5 device must join the Kerberos domain...
microsoft
partner
theXfactor82_91's avatar
theXfactor82_91
Icon for Nimbostratus rankNimbostratus
Feb 28, 2011
We have used the domaintool command on the load balancer to create the spn for the virtual IP and created an AD Computer object with the same name as the virtual IP. We are still getting 401 errors from IE 8.

 

 

We are using IIS 7.0 with the service account "network" in the default application pool. Do we need to use a service account and create an spn to make this work?