Before following the steps below to configure the LoadMaster, there are some prerequisites that need to be in place:

  • The Active Directory settings must be configured correctly. If they are not configured correctly, constrained delegation will not work. For more information on what needs to be configured, please refer to the Using CAC Authentication for LoadMaster WUI Access section.
  • A reverse DNS lookup zone needs to be set up which is able to resolve the IP address of the Real Server(s).
Note: There can be multiple entries for Real Servers in the DNS server. As a result of this, when the LoadMaster does a reverse lookup in order to get the FQDN, the result may not match the Service Principal Name (SPN). This may result in a mismatch between the SPN the LoadMaster generates and the one configured under the trusted user in the Active Directory. To mitigate this issue, it is possible to override the DNS server entries by adding hosts for local resolution in the LoadMaster (System Configuration > Host & DNS Configuration).
  • The LDAP server needs to support LDAP over a secure transport, for example LDAPS or StartTLS.
  • The appropriate certificates must have been issued for the LoadMaster.