For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gurdip_Sira_175's avatar
Gurdip_Sira_175
Icon for Nimbostratus rankNimbostratus
Oct 22, 2015

Load balancing Sharepoint - constant logon prompts

Hi All,

 

I am trying to load balance SharePoint 2013 SP1. However, I keep getting the authentication prompt in IE.

 

  • OneConnect disabled
  • Virtual server is on port 443
  • Pool members are on 80
  • I have added an iRule to add the custom front end http header
  • Sharepoint servers have the backconnectionhostnames property set to the site collection url (host named site collection).

SSL offloading is being used via F5.

 

The problem happens for me in only Google Chrome but other users in both IE and Chrome. How do I get rid of this completely?

 

I am able to share any other details required.

 

Thanks!

 

application delivery
devops
iApps
LTM
microsoft

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 22, 2015

    Considering that a) you don't appear to be using APM, and b) it works for some browsers and not others, I'm going to assume that you're doing NTLM authentication to the SharePoint server through the LTM VIP.

     

    If that's true, disable the OneConnect profile, which can cause issues with NTLM.

     

    Also, assuming NTLM authentication, your browser has to be configured to support "Windows Integrated Logon". In IE, go to the Tools Menu -> Internet Options -> Security Tab, click on Local Intranet, then click the Sites button, and then click the Advanced button. In your IE browser you should a host name or wildcard host entry that matches your site. This is what allows IE to pass the user's logon token to a remote server that requests authentication.