Forum Discussion

TLL_91858's avatar
TLL_91858
Icon for Cirrus rankCirrus
Mar 01, 2016
Solved

Does APM setup also still use krb5.conf settings?

We have a setup that has grown from ACA through APM using Kerberos, and in doing some cleanup, I've noticed old settings in the krb5.conf file. Question is, now that we are configured through APM, do the old manual settings in krb5.conf still affect our kerberos configuration?

 

Tom

 

  • For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes

     

    Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.

     

2 Replies

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account

    For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes

     

    Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.

     

    • TLL_91858's avatar
      TLL_91858
      Icon for Cirrus rankCirrus
      Not what I expected for an answer, but interesting. Mine was modified many versions ago when using ACA for Kerberos, and I now see it is still affecting my setup under APM. Follow-up: Is there a way to get a 'virgin' krb5.conf?