At a customer recently we had built out a vRA 7.3 environment in a High Availability configuration with Kerberos as our primary authentication method. Everything worked great until we placed things behind the F5 and made the final recommended configuration changes from the vRA Documentation. When attempting to log in to the portal after updating the IdP hostname to point to the Load Balanced name, the Kerberos login would fail and we would be re-directed to our secondary login method of password. I couldn’t find anything out there that specifically referenced employing Kerberos authentication in conjunction with a High Availability configuration. I found several articles that covered the Kerberos configuration (here’s a good one), and several articles that covered the High Availability configuration, but nothing that showed one little tweak that made the two work together. Hopefully this can save someone the frustration we ran into.
Continue reading “vRealize Automation 7.3 High Availability Config with Kerberos”