Forum Discussion

mdsilva_266229's avatar
mdsilva_266229
Icon for Nimbostratus rankNimbostratus
Aug 03, 2016

401 Kerberos fallback not passing username and passwords

Hi I'm trying to set up a 401 auth.

 

On Negotiate, via Kerberos. If you hit the server on a PC on our company domain you will be logged in. (this works). On fail/fallback, login via LDAP using the user/password from the pop up box. (this doesn't work!!)

 

On Basic, login via ldap (this works)

 

The report logs show that the ldap after kerberos does not have any username or password set. Am i doing this wrong? Any advice on how to fix this?

 

Below is my workflow. LDAP Auth (staff 2) does not work.

 

 

I would be grateful for any advice you can provide

 

APM
devops

2 Replies

Sort By
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Aug 03, 2016

    With kerberos logon, there is no access to a password so you can't use any further authentication mechanisms or SSO (aside from kerberos delegation).

     

    You'd have to have another 401 response, or maybe a forms-based logon page after the fallback branch from kerberos logon. Then it should be fine.

     

    • mdsilva_266229's avatar
      mdsilva_266229
      Icon for Nimbostratus rankNimbostratus
      Aug 03, 2016

      Hi Lucas,

       

      Can you please elaborate a little?

       

      Basically what i want is, If your PC is on the company domain auto login, otherwise use ldap. Whats the best way to do this?

       

      Cheers Michael