O'Reilly logo

Troubleshooting NetScaler by Raghu Varma Tirumalaraju

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Configuration checklist

Here's a quick checklist of the items that need to be in place for KCD to function properly:

  • On the Active Directory Server:
    • AD account representing the NetScaler as a system User that can obtain tickets for other users
    • Keytab for this NetScaler User
    • Constrained delegation enabled for the NetScaler system account
    • List of resources that the end User can delegate to NetScaler for authentication
  • On the Web Server:
    • Kerberos enabled on the site
    • Best practice is to have NTLM enabled as fallback
  • On the NetScaler:
    • Authentication on the LB VIP. The server is added on the NetScaler with its domain/hostname – this is very important. The domain controller should also be able to resolve the hostname correctly:
  • Authentication vServer with authentication ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required