Forum Discussion
Harrish_371555
Nimbostratus
Sep 27, 2018Need an iRule to skip Kerberos Authentication for MAC
While trying to edit a document(excel or a word) on a SharePoint site, Only MAC users are getting a prompt to authenticate, Whereas windows users don't have this problem. Our APM policy doesn't have ...
Nat_68430
Nimbostratus
Feb 19, 2019Uncertain if this helps any? Yet have had to work through a number of on-premise hosted Sharepoint issues last few years for MACs specifically. The following has worked 'mostly' to re-negotiate NTLM. Believe it's still compatible with Office 2016 client apps. Though M$oft change things around...often. E.g.:
when HTTP_REQUEST {
set useragent [string tolower [HTTP::header value "User-Agent"]]
if { ([string length $useragent] < 50) || (($useragent contains "mac") && !($useragent contains "mozilla")) || (($useragent contains "macintosh") && ($useragent contains "microsoft")) }{
if {($sid == "") || ($useragent contains "macintosh")}{
switch -glob $useragent {
"microsoft office" -
"*microsoft document connection*" -
"*microsoft office word*" -
"*microsoft office excel*" -
"*microsoft office powerpoint*" -
"microsoft office existence discovery" -
"microsoft office protocol discovery" -
"*webdavfs*" -
"*word*" -
"*excel*" -
"*powerpoint*" -
"*onenote*" -
"*webdavlib*" {
ACCESS::disable
if { ([HTTP::method] == "OPTIONS") && ([HTTP::header value
Authorization] == "Bearer") }{
set mac_auth 1
}
}
}
}
}
when HTTP_RESPONSE {
if { ($mac_auth != "") }{
HTTP::respond 401 WWW-Authenticate "NTLM"
set mac_auth ""
}
}
NatDoyle
Altostratus
Feb 19, 2019Actually, I need to peruse these forums more. Here is a far more elegant solution I will also be testing :) https://devcentral.f5.com/s/feed/0D51T00006i7dU0SAI
 
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects