Bug ID 753151: Kerberos SSO: Improve the logging of the error msg when Kerberos requests are not processed.

Last Modified: Oct 24, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1

Fixed In:
15.0.0

Opened: Dec 14, 2018
Severity: 4-Minor

Symptoms

Currently, when the client system closes the TCP connection, associated Kerberos requests are not processed. The error msg logged is generic, and does not include the reason Kerberos requests were not processed. err websso.3[25121]: 014d0048:3: /Common/test_access_sso:Common:074d1914: failure occurred when processing the work item: Kerberos failed

Impact

The error msg logged is generic and does not indicate the reason for the failure, which makes it difficult to debug scenarios in which the BIG-IP system handles a large number of Kerberos SSO requests that lead to system instability.

Conditions

This occurs when Kerberos requests are not processed because the client closed the TCP connection.

Workaround

None.

Fix Information

When Kerberos SSO requests are not processed due to client or server-side issues, the system logs an error msg containing the corresponding reason.

Behavior Change