Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone know if it is possible for the script to generate a kerberos ticket using keytab and then use the ticket to authenticate via tac/kdc. If possible, can you please point to relevant documentation/links? Thanks
You can authenticate client traffic to a virtual server using Kerberos:
Manual Chapter: Configuring Kerberos Delegation https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementation/sol_kerberos_delegation.html
You cannot use kerberos for admin system authentication though. Here are the supported admin auth methods:
Manual Chapter: Configuring Remote User Authentication and Authorization https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-3-0/26.html
Local admin database LDAP Active Directory TACACS+ Client SSL certificate / LDAP
What protocol do you want to use for your admin scripts (SSH or iControl)?