Problems with Kerberos and delegation account

Hi Kevin & Matthieu

Ok this means that we should be able to use this for certificate based authentication against a webservice for an arbitrary domain name. Now I just need tog et the pieces put correct togheter.

I tried to follow the guide here http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-guide-11-3-0/4.html

but somewhere I mush have missed something - or misunderstood so I think I sratch my config and startover once more.

btw - which type of user-name should I use in the SSO profile ? - SamAccountname or what attribute should I use ? I do a LDAP lookup before I pass the name to the Kerberos SSO profile so I can use a arbitrary attribute from there.

Is there somewhere a sample I could take a look at? It cannot be that hard to reproduce the steps needed to get this working.

best regards /ti