Forum Discussion

tiwang's avatar
tiwang
Icon for Nimbostratus rankNimbostratus
Jun 04, 2014

More kerberos problems

Hi out there   I have a pretty simple apm setup with a kerberos sso where I extract a user-name from a certificate and use this for ldap and afterwards get a kerberos ticket with. This Works fine ...
BIG-IP Access Policy Manager (APM)
design
security
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
Jun 05, 2014

Could not find SSO domain, check variable assign agent setting

 

I think, this you can ignore as this due to the value not set for session.logon.last.domain. If you assign the domain name to it, you can get rid of it.

 

 

If you don't see Kerberos going out, it could be due to the PTR record for the server you are trying to access is failing. It is required to fill the SPN pattern as you have left it blank. You can do tcpdump on port 53 and see if the response return good. Rightfully, you should see the error in your following logs.