Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone know if it is possible for the script to generate a kerberos ticket using keytab and then use the ticket to authenticate via tac/kdc. If possible, can you please point to relevant documentation/links? Thanks

share|improve this question

1 Answer 1

You can authenticate client traffic to a virtual server using Kerberos:

Manual Chapter: Configuring Kerberos Delegation https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementation/sol_kerberos_delegation.html

You cannot use kerberos for admin system authentication though. Here are the supported admin auth methods:

Manual Chapter: Configuring Remote User Authentication and Authorization https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-3-0/26.html

Local admin database LDAP Active Directory TACACS+ Client SSL certificate / LDAP

What protocol do you want to use for your admin scripts (SSH or iControl)?


share|improve this answer
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. –  Mark Henderson May 31 '13 at 3:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.