seamless client ntlm authentication

Hi,

 

We are on 11.5.1 and went through the steps as mentioned in the article below.

 

https://devcentral.f5.com/articles/leveraging-big-ip-apm-for-seamless-client-ntlm-authentication.U0QLRVfeQV9

 

1. Post from client to POST /ntlm/auth HTTP/1.1
2. Initial response from server: WWW-Authenticate: NTLM
3. Request from client with: Authorization: NTLM TlRMTVN...
4. Response from server for 3: Proxy-Support:Session-Based Authentication WWW-Authenticate:NTLM TIR....
5. Another post from client to POST /ntlm/auth HTTP/1.1 with Authoriation:NTLM TIRM...
6. Response from Server is status code 504.

We looked into APM logs and here is what we see.

 

Logging Agent: entering External Logon Page

 

May 3 18:06:58 NCF5APMB err nlad[4750]: 01620000:3: <0x559058f0> clntsvc: error [0xc000005e,NT_STATUS_NO_LOGON_SERVERS] queuing logon request

 

May 3 18:06:58 NCF5APMB warning eca[5424]: 01620002:4: [Common] 208.72.180.21:40530 Authentication result: USERNAME@USERDOMAIN (COMPUTERNAME): Fail (STATUS_NO_LOGON_SERVERS)

 

May 3 18:06:58 NCF5APMB err eca[5424]: 0162000e:3: Could not verify user (USERDOMAIN\USERNAME /Common/seamless-ntlm, service Id: 22 for domain USERDNSDOMAIN DC: xxx.xxx.com (10.100.26.15), account:COMPUTERNAME) credential (STATUS_NO_LOGON_SERVERS)

 

May 3 18:06:58 NCF5APMB warning eca[5424]: 0162000f:4: Received invalid type of NTLMSSP message

 

Really appreciate if anyone can give us some pointers on where to start to troubleshoot this.

 

Thanks Ski