Forum Discussion

TLL_91858's avatar
TLL_91858
Icon for Cirrus rankCirrus
Mar 01, 2016
Solved

Does APM setup also still use krb5.conf settings?

We have a setup that has grown from ACA through APM using Kerberos, and in doing some cleanup, I've noticed old settings in the krb5.conf file. Question is, now that we are configured through APM, d...
APM
BIG-IP
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Mar 01, 2016

    For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes

     

    Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.

     

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account

For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes

 

Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.

 

TLL_91858's avatar
TLL_91858
Icon for Cirrus rankCirrus
Mar 02, 2016
Not what I expected for an answer, but interesting. Mine was modified many versions ago when using ACA for Kerberos, and I now see it is still affecting my setup under APM. Follow-up: Is there a way to get a 'virgin' krb5.conf?