Forum Discussion
Problems with Kerberos and delegation account
hi kevin thanks for your notes (been on vacation so a bit delayed reply) - currently I am running a testlab on my labtop where I through gns3 and virtualbox is running the f5 11.3 ve togheter with a windows domain - a dc and a webserver - so it is pretty easy for me to capture what is happening. what I can see is that when I access it in the domain - from a domain pc or not - just authenticate as a domain user - the webserver authenticates with some "kerberos" stuff - not that familar with kerberos yet but looks correctly what it does there. When I try to access the webserver from a pc through the F5 I get some mess with the SPN - the webserver will normally use a a SPN as HTTP.. I'll try to scratch the config once more on the F5 and re-create it - now have I been away from it since before chrsitmas so I'll try to refresh what is happening. The SPN is created domain-wide or? I do not have to logon to the webserver and define the SPN there through adsiedit - this is a domain-wide user-delegations - or have I misunderstood something here? best regards - and a happy new year /ti
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com