Bug ID 747725: Kerberos Auth agent may override settings that manually made to krb5.conf

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.4, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4

Fixed In:
15.0.0, 14.1.2.5, 13.1.3, 12.1.4.1

Opened: Oct 23, 2018

Severity: 3-Major

Symptoms

when apmd starts up, it can override settings in krb5.conf file with those required for Kerberos Auth agent

Impact

Kerberos Auth agent behavior is not what administrator expects with the changes. it may also affect websso(kerberos) to behave properly

Conditions

- Kerberos Auth is configured in an Access Policy, - administrator made changes to krb5.conf manually to the section [realms] of the configured realm

Workaround

None

Fix Information

after fix, the configuration file changes are merged. Kerberos Auth agent adds the lines it requires and does not override existing settings

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips