For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mark_22062's avatar
Mark_22062
Icon for Nimbostratus rankNimbostratus
Feb 21, 2014

Websense iApp Kerberos Config

I have deployed the Devcentral supplied Websense Content Gateway Assistant iApp to load balance our outbound internet traffic. This all seems to work quite well, but we've noticed that rather than u...
application delivery
deployment
devops
iApps
LTM
Mark_van_D's avatar
Mark_van_D
Icon for Cirrostratus rankCirrostratus
Feb 25, 2014

So it appears that the issue was being caused by duplicate SPNs in the environment. We removed the duplicate SPN from one of the appliances, took it out of the Pool and Kerberos magically works. But that means we only have one member in the pool which defeats the whole purpose of trying to make it load balance through the F5.

 

Config that does not work

 

-

Config that works

 

So that makes me think that the delegation should sit on the F5.