Forum Discussion
Doug_Pruiett_24
Nimbostratus
Feb 08, 2016Multiple Windows Authentication Prompts after F5 Authentication
I am not the principle engineer on this issue, nor an F5 expert. I am part of a project that uses F5 and doing a little research to see if I can find help for an issue we are having.
The desire...
Michael_Jenkins
Cirrostratus
Feb 08, 2016I did add the hostname to the F5 hosts file so it could do a reverse lookup to the F5 VIP. Then I began getting a little further...
Feb 8 15:40:05 xxxxx debug websso.1[99999]: 99999999:9: different sso config object received, name: /Common/KERBEROS_SSO_PROFILE, method: 5
Feb 8 15:40:05 xxxxx debug websso.1[99999]: 99999999:9: ssoMethod: kerberos usernameSource: session.logon.last.username userRealmSource: session.ad.last.actualdomain Realm: EXAMPLE.COM KDC: AccountName: host/kerberos_test_user.EXAMPLE.COM@EXAMPLE.COM spnPatterh: HTTP/%s@EXAMPLE.COM TicketLifetime: 600 UseClientcert: 0 SendAuthorization: 1
Feb 8 15:40:05 xxxxx info websso.1[99999]: 014d0014:6: 5634e025: Found HTTP 401 response for SSO configuration '/Common/KERBEROS_SSO_PROFILE' type:'kerberos'
Feb 8 15:40:05 xxxxx info websso.1[99999]: 014d0011:6: 5634e025: Websso Kerberos authentication for user 'user_name' using config '/Common/KERBEROS_SSO_PROFILE'
Feb 8 15:40:05 xxxxx debug websso.1[99999]: 014d0023:7: S4U ======> ctx: 5634e025, sid: 0x5a8472b0, user: user_name@EXAMPLE.COM, SPN: HTTP/ssrs.domain.com@EXAMPLE.COM
Feb 8 15:40:05 xxxxx debug websso.1[99999]: 99999999:9: S4U ======> - NO cached S4U2Proxy ticket for user: user_name@EXAMPLE.COM server: HTTP/ssrs.domain.com@EXAMPLE.COM - trying to fetch
Feb 8 15:40:05 xxxxx debug websso.1[99999]: 99999999:9: S4U ======> trying to fetch S4U2Proxy ticket for user: user_name@EXAMPLE.COM server: HTTP/ssrs.domain.com@EXAMPLE.COM
But after this, I don't see anything else relating kerberos.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects