Forum Discussion

a_basharat_2591's avatar
a_basharat_2591
Icon for Nimbostratus rankNimbostratus
Mar 21, 2018

NTLM authentication in APM

Hi,

 

I have the following APM Policy defined on a Virtual Server:

 

 

To introduce NTLM on it [following the article: https://devcentral.f5.com/articles/configuring-apm-client-side-ntlm-authentication] to allow seamlessly authentication for domain-joined machines:

 

  • Do I need to replace on the 'Negotiate' branch the AD box for an NTLM box [NTLM Auth Result]?
  • A not domain-joined machine will follow basic or negotiate branch?
  • on the HTTP 401 box, What do I need to select on 'HTTP Auth Level' [none, basic, negotiate, basic+negotiate]?

Many thanks

 

APM
application delivery
devops
LTM

1 Reply

Sort By
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Mar 22, 2018

    NTLM is not configurable in APM yet.

     

    To support NTLM auth, you have to

     

    • enable eca profile in the virtual server configuration (tmsh only, not available in webui)
    • create a NTLM profile in APM
    • enable this profile with an irule
    • create a NTLM auth result box in APM to get NTLM auth status done before APM evaluation.