Forum Discussion

jaikumar_f5_226's avatar
jaikumar_f5_226
Icon for Nimbostratus rankNimbostratus
Feb 08, 2018

11.5.4 HF4 - root password changed with localuser account

Hey All,

My QA title says it all. I just ran into testing this, if a localuser account with admin role can change the root password. And yes it does.

passwd root

I thought it was a bug in the 11.5.4 HF2 alone. Is there an article on this. Is this a normal behavior.

BIG-IP
security
TMSH

1 Reply

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Feb 08, 2018

    Hello,

    A user with Administrator Role have a complete access to all objects on the system. He can create, delete, modify local users and can change root and admin password.

    find below the kb that describe this:

    If you have an Administrator user role, you can also change some properties of the root account. Specifically, you can change the password of the root account, and you can enable or disable access to the BIG-IP system through SSH. 

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-concepts-11-4-0/10.html
    This is for 11.4 version but the behaviour don't change....

    Regards