BIG-IP v14: Expired Password Prompt for Remote Auth Users

Hi,

The configuration that allow to change password is to follow this procedure:

https://support.f5.com/csp/article/K15676

Modification need to be done in "logon page" you can find procedure in KB above. and when you set this configuration:

"If the user account password change interval time has expired, the user is still required to update their password. In this scenario, authentication relies on the last password set. The BIG-IP APM AAA configuration does not require Active Directory privileges beyond read-only access."

So check in the logon page if you have configured "change pwd" functionnality on the impacted services.

keep me in touch.

regards,

Hi,

Ok sorry, maybe impacted user trigged "Password policy", you can set an Expiration Warning, you can specifies the number of days prior to password expiration that the system sends a warning message to a user.

Can you check using this procedure:

System -> Users -> Authentication

Under password policy locate secure password enforcement setting and set it to meet your needs.

But you can confirm that GUI auth is in local or trough an AD?

User impacted is in local or they used AD, Because now you can fallback in local for authentication... If ad failled to find user.

for more info:

https://support.f5.com/csp/article/K15497

regards