Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone know if it is possible for the script to generate a kerberos ticket using keytab and then use the ticket to authenticate via tac/kdc. If possible, can you please point to relevant documentation/links? Thanks

share|improve this question

For this to work, at a minimum, you would need to use another F5 outfitted with Access Policy Manager to achieve the automated login. The F5 is Linux based however, and you might conisider just using an SSH key to do this.

share|improve this answer

You can authenticate client traffic to a virtual server using Kerberos:

Manual Chapter: Configuring Kerberos Delegation

You cannot use kerberos for admin system authentication though. Here are the supported admin auth methods:

Manual Chapter: Configuring Remote User Authentication and Authorization

Local admin database LDAP Active Directory TACACS+ Client SSL certificate / LDAP

What protocol do you want to use for your admin scripts (SSH or iControl)?


share|improve this answer
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Mark Henderson May 31 '13 at 3:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.