Forum Discussion

Orest_Smoleac_1's avatar
Orest_Smoleac_1
Icon for Nimbostratus rankNimbostratus
Nov 13, 2015

BIGIP F5 3600 LTM series (v 10.2.4) Group Authentication

Hi everyone, Can someone share the steps to configure domain group authentication through GUI or SSH for a BIGIP F5 3600 v 10.2.4? I've googled a bit and found some steps but I believe they are for a different version of software since i do not see "group remote access" check box. I also do not see "Remote Role Groups" under System->Users as in below instructions. http://mikeshoup.com/2014/05/22/f5-big-ip-ltm-active-directory-authentication/ I appreciate any help on solving this.

 

BR Orest sorests@yahoo.com

 

application delivery
LTM

6 Replies

Sort By
    • Orest_Smoleac_1's avatar
      Orest_Smoleac_1
      Icon for Nimbostratus rankNimbostratus
      Nov 16, 2015
      Mainly yes, but even if i make the settings, there's a missing checkbox ("Check Member Attribute in Group"). Without this checkbox checked it will not be able to search inside the security groups. I could not find any documentation saying how to make that box to show up in System >> Users:Authentication page.
    • BinaryCanary_19's avatar
      BinaryCanary_19
      Historic F5 Account
      Nov 16, 2015
      If I remember correctly, it just verifies username and password is correct by making certain LDAP calls to the Domain Controller as the user that was typed in the GUI/SSH.
    • Orest_Smoleac_1's avatar
      Orest_Smoleac_1
      Icon for Nimbostratus rankNimbostratus
      Nov 17, 2015
      Nothing seems to work so far. I do not see that check box and do not have a tab for groups under System >> Users. I tried to manually add a remote-role as: modify auth remote-role role-info add ... also through bpsh and cannot see the change in GUI even after a reboot.
  • BinaryCanary_19's avatar
    BinaryCanary_19
    Historic F5 Account
    Nov 17, 2015

    Hi,

     

    I just checked, and this checkbox is not available on v10.2.4.

     

    I checked on version v10.2.4, 11.0.0, 11.4.0 and 11.6.0 devices and the earliest I saw this was v11.4.0

     

    • Orest_Smoleac_1's avatar
      Orest_Smoleac_1
      Icon for Nimbostratus rankNimbostratus
      Nov 18, 2015
      Oh, that would make sense. Is it possible to check if under System >> Users there's a tab for Group authentication? I see only 3 tabs on 10.2.4: "Users List", "Partition List" and "Authentication".