Forum Discussion

f5learn_164388's avatar
f5learn_164388
Icon for Nimbostratus rankNimbostratus
May 03, 2016

kerberos seamless login issue

Hello,   We are trying to get seamless login working for the laptop users in our environment. Here is the policy we have currently which seems to be working with following issues.   1) If we ...
APM
application delivery
f5learn_164388's avatar
f5learn_164388
Icon for Nimbostratus rankNimbostratus

Michael, i think we got past the pop up thing. Its strange that once the reverse DNS lookup entry was added it took care of the delay and also the popup. Now we are seeing something different. Most of the times the seamless thing is working but once in a while we get a page cannot be displayed. We put some message boxes in place and see that the below highlighted path is taken and it just fails with a "page cannot be displyed" message in the browser. When we took the packet captures we see that there is a ack,rst from server and nothing happens. On the apm logs we see that "session is deleted due to user inactivity". Is there something else we are missing?

 

Michael__'s avatar
Michael__
Icon for Nimbostratus rankNimbostratus
May 25, 2016
Hi, the PTR entry for the SPN is mandatory or at least a host entry (on the APM) to get the Kerberos auth with the F5 working About the RST Could you set the Access Policy Logging to Debug (System ›› Logs : Configuration : Options) and check the log output (/var/log/apm) for a reason ?!