Forum Discussion

cstaniar's avatar
cstaniar
2 years ago

Kerberos Authentication

Hello,

We’re trying to setup Kerberos only authentication with logicmonitor.

I’ve configured the logicmonitor service account to use Kerberos with the wmi.authType set to Kerberos and applied this at the same level where the service account is in use. The servers have been added as fqdns.

However, we are still seeing NTLM login usage by the service account (ntlm auditing gpo).

Suggestions?

Chris

  • Anonymous's avatar
    Anonymous
    2 years ago

    Sounds like a good thing to bring up with support.

  • cstaniar's avatar
    cstaniar
    2 years ago

    I also opened a ticket with support. I also wanted to see what the community had to say about it.

    We do have a Citrix VAD platform and I was aware that if we wanted to maintain monitoring of our Citrix env. that would have to be an exception to blocking ntlm.

    However, I’d like to figure out why the non-citrix components are still trying to use ntlm

  • tswisdom's avatar
    tswisdom
    Icon for LM Conqueror rankLM Conqueror
    2 years ago

    Good afternoon @cstaniar, as Stuart recommended, we’d suggest you reach out to support for further investigation. With that said, are you using Citrix VAD, or some other virtualization platform? There are some nuances with authenticating to virtual machines, particularly Citrix VAD, that currently prevent Kerberos authentication methods, but support should be able to provide additional clarification once they investigate.