Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Feb 14, 2014

Citrix iApp APM and Acticve Directory Account

Hello, I have an LTM with APM and Citrix is setup using the latest iApp. During setup (or reconfigure) in the iApp template under the APM portion it asks for an AD account with administrative permissions and that if the account becomes locked users will be unable to logon. It doesn tmention in any documentation though if this account needs to be part of domain admins group or not and what the account actually does. Any advice? Thanks.

 

APM
application delivery
deployment
devops
iApps
LTM
security

4 Replies

Sort By
  • Greg_Crosby_319's avatar
    Greg_Crosby_319
    Historic F5 Account
    Feb 14, 2014

    It is used to bind and query for users ad account information and does need to be a user account that is part of the Citrix AD Domain (or a user that has rights to the Citrix AD domain).

     

  • JoshBecigneul's avatar
    JoshBecigneul
    Icon for MVP rankMVP
    Feb 14, 2014

    In most cases leaving the user a part of Domain Users is just fine. If you want to have the F5 notify users of password expiration, I believe you need to give the f5 service account the right to reset users' passwords.

     

  • tolinrome_13817's avatar
    tolinrome_13817
    Icon for Nimbostratus rankNimbostratus
    Feb 14, 2014

    Thanks, any documentation on this, would be nice to actually see something F5 printed on it. Thanks again.