Bug ID 747725: Kerberos Auth agent may override settings that manually made to krb5.conf

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.4, 14.1.2,,,,

Fixed In:
15.0.0,, 13.1.3,

Opened: Oct 23, 2018

Severity: 3-Major


when apmd starts up, it can override settings in krb5.conf file with those required for Kerberos Auth agent


Kerberos Auth agent behavior is not what administrator expects with the changes. it may also affect websso(kerberos) to behave properly


- Kerberos Auth is configured in an Access Policy, - administrator made changes to krb5.conf manually to the section [realms] of the configured realm



Fix Information

after fix, the configuration file changes are merged. Kerberos Auth agent adds the lines it requires and does not override existing settings

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips