For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Mar 30, 2021

AD Authentication Failing in APM

Following steps were taken. However, I am getting the error Common/devportal.kellogg.com_access_process:Common:eff7711c: AD module: authentication with 'testuser1' failed: Invalid format of Kerberos ...
BIG-IP Access Policy Manager (APM)
LTM
security
Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Mar 30, 2021

Thanks for the reply. I have check the HW and Systems time. They were different, however now HW and Systems time is with in 3 second. The other thing is, i am able to authenticate using LDAP AAA (not Active Directory). I used the same AD servers. But authentication failed with Active Directory AAA.

 

One question I have, Can we use the AAAA LDAP authentication for Kerberos SSO with the Kerberos SSO profile.

 

Any suggestion.

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Apr 01, 2021

I am able to solve the issue. In the krb5.conf file, there was a extra space in the ticket_lifetime = 24 parameter setting. I removed the extra space and now it is working.