Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
12.1.4, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4
Fixed In:
15.0.0, 14.1.2.5, 13.1.3, 12.1.4.1
Opened: Oct 23, 2018 Severity: 3-Major
when apmd starts up, it can override settings in krb5.conf file with those required for Kerberos Auth agent
Kerberos Auth agent behavior is not what administrator expects with the changes. it may also affect websso(kerberos) to behave properly
- Kerberos Auth is configured in an Access Policy, - administrator made changes to krb5.conf manually to the section [realms] of the configured realm
None
after fix, the configuration file changes are merged. Kerberos Auth agent adds the lines it requires and does not override existing settings