Forum Discussion

Doug_Pruiett_24's avatar
Doug_Pruiett_24
Icon for Nimbostratus rankNimbostratus
Feb 08, 2016

Multiple Windows Authentication Prompts after F5 Authentication

I am not the principle engineer on this issue, nor an F5 expert. I am part of a project that uses F5 and doing a little research to see if I can find help for an issue we are having.   The desire...
Secure Web Gateway
security
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Feb 09, 2016

So it looks like I've got it working now. After all your help @Kevin, I realize that I didn't have delegation allowed on the host/kerberos_user account for the http/ssrs_user SPN (but did for the server accounts) which makes sense why it'd only work with them. I didn't realize I could search for a user to get the service principal. Once I added that to the user, it started working after I did one more thing.

The other issue was that on the ssrs_user account, the spn was set to 

HTTP/ssrs.example.com
, and it didn't work. Once i removed that and added 
http/ssrs.example.com
in its place, it started working. I'm guess case matters. 🙂

Thanks for all your help. It's helped me learn a lot of little things about Kerberos so far. I appreciate your expertise.