Forum Discussion

jban_198207's avatar
jban_198207
Icon for Cirrus rankCirrus
Oct 26, 2017
Solved

Kerberos SSO resource and account not in the same domain

Hi,   We create F5 Service Account in Domain1 as -Host/ -Users are in: domain1.local Web resource is in domain2.local with SPN let say: HTTP/webresource.domain2.local   When I test with kinit a...
application delivery
BIG-IP Access Policy Manager (APM)
  • jban_198207's avatar
    jban_198207
    Nov 04, 2017

    Changed -> Dns_lookup_kdc = true Analaysing packet capture answer was found.

     

    USERDOMAIN.INTERNAL was child domain of INTERNAL and INTERNAL KCD was not allowed on firewall. after allowing INTERNAL KCD, stuff started to work.

     

jban_198207's avatar
jban_198207
Icon for Cirrus rankCirrus
Oct 27, 2017

I put resource and delegetion account in same Domain. User is in antoher domain and know I am getting: Realm not local to KDC (-1765328316)