For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DannyG_34437's avatar
Aug 21, 2013

Seeing HTTP 401 response messages in APM log

Hi, I am new to the LTM/APM world and have a question about some messages I am seeing in the APM session reports. I have my webtop working fairly well but am seeing "HTTP 401" messages in the log. See examples below:

 

2013-08-21 18:16:29 Found HTTP 401 response for SSO configuration '/Common/Extranet_NTLMV2_SSO' type:'ntlmv2' 2013-08-21 18:16:29 Found HTTP 401 response for SSO configuration '/Common/Extranet_NTLMV2_SSO' type:'ntlmv2' 2013-08-21 18:16:29 Websso NTLM authentication for user 'danngull' using config '/Common/Extranet_NTLMV2_SSO'

 

Is this normal type messages one would expect to see in the APM logs or are there issues I need to investigate?

 

Thoughts? Thanks, Danny

 

6 Replies

  • Is this in conjunction with an error? I believe the error means that APM is seeing a 401 response from the backend server even though your SSO is presenting an NTLMv2 authentication. Does it happen for all users?

     

  • it is tricky with only three lines but i believe it is normal behaviour, the APM sees the 401 so sends the NTLMv2 authentication. these also don't appear to be errors but more informational messages.

     

    did you up the logging level?

     

  • I get these messages whenever I go to my sharepoint application offered up on my webtop. App seems to work ok... I noticed that the more active I am in the app, the more messages I receive.

     

    @boneyard, not sure about the logging level, how do I check?

     

    Thanks, dg

     

  • Have you ever find a solutions? I am running into the same issue here. Only a few users report issues going to sharepoint.

     

    • DannyG_34437's avatar
      DannyG_34437
      Icon for Cirrus rankCirrus
      Yeah, I got rid of the webtop and went to the SharePoint iAPP. I now have most of my issues worked out.
  • isn't that the typical "3-way handshake" of a NTLM auth request?

     

    ie. 401 auth response, 401 challenge and then the final NTLMSSP_Negotiate?