Forum Discussion
NimbostratusVmware View F5 APM KCD limitations
Before I start banging around in the lab, I figured I'd post something on dev to see if anyone has tried doing authentication delegation with vmware view. I know you can tie vmware view in with active directory so I assume that you can use kerberos for authentication purposes. Now, since you can do that, can you do Kerberos Constrained Delegation? I would assume so, and if so, can you setup a Kerberos Constrained Delegation configuration with F5 APM and vmware view? Ultimately what I am trying to achieve is 2 factor auth with a smart card that is related to an active directory user. I am not a VDI expert by any means. I only know the F5 side of the house. Any knowledge on this subject and the limitations that come with it would be awesome!
Thanks!
3 Replies
cjbarr1234Altostratus
Hey Jonathan. The VMware Horizon "View" deployment guide actually covers this. Where it will use RADIUS, or RSA to allow for two factor authentication.
Page 3 and so forth. It's a great read if you haven't read it yet.
jspiglerj2rsolvesSorry for the last response cjbarr! Thanks for the document. I read through it and didn't see anything specifically about Smart Card and Kerberos constrained delegation. I have a client that is specifically looking at this two factor auth scenario. Guess the only way to figure it out is test it out!
Thanks!
raZorTTCirrostratus
Just wondering if you got anywhere with the KCD to the Horizon client?
Cheers
