For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

boneyard's avatar
boneyard
Icon for MVP rankMVP
Jun 19, 2013

mixing SSO methods, i.e. ntlm, basic http and kerberos

i was wondering if i can freely mix SSO methods with a webtop implementation. currently im using NTLMV2 and HTTP basic together by configuring different SSO profiles on the portal access resources. t...
BIG-IP Access Policy Manager (APM)
remote access
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jun 26, 2013

SSO logging is set to debug.

 

 

the error "Kerberos: Failed to get ticket for user ..." is gone when removing the IP of the AD server from the KDC field. but now i have a feeling no ticket is requested. i see nothing in the AD log around the time to SSO is attempted. only a "A Kerberos authentication ticket (TGT) was requested." for the user when the user logs in to the webtop.

 

should i expect an entry in the AD when access to the site is attempted?