For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

M0d3u52014_1653's avatar
M0d3u52014_1653
Icon for Nimbostratus rankNimbostratus
Apr 17, 2015

Need help with kerberos delegation

So whoever didn't run when you saw the word kerberos, thank you. I am using the instructions located here to set up kerberos delegation: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/pr...
application delivery
LTM
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
Apr 17, 2015

Better to follow this soln. https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-4-0/4.html

 

The steps to create delegation account

 

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-4-0/4.htmlunique_716053090

 

There is no reference to Virtual server created on APM. When APM connects to the back end server IP address, it uses the PTR record to find the corresponding SPN. This is provided you leave 'SPN Pattern' under kerberos SSO screen empty

 

 

You can enable debug for sso, cli using

 

tmsh modify sys db log.sso.level value debug

 

Let us know how it goes..

 

Related Content