Forum Discussion

  • Munney's avatar
    Munney
    Icon for Nimbostratus rankNimbostratus
    Jun 07, 2019

    Thanks!

     

    I should have been more specific...not users logging into the APM but users authenticating through it. If it can somehow query the AD and if the users password is expiring within 10 days give a warning that they should reset it.

    • KeesvandenBos's avatar
      KeesvandenBos
      Icon for MVP rankMVP
      Jun 10, 2019

      Hi,

       

      with the AD query agent in the VPE of the APM your able to warm users and even give them the option to change their password (don’t forget to open port 464 (Kerberos password change) between your BIG-IP and AD controllers).

       

      cheers,

       

      kees

  • Evan_Thompson's avatar
    Evan_Thompson
    Icon for Cirrus rankCirrus
    Jun 07, 2019

    Hi.

     

    Would this article be helpful?

     

    K15497: Configuring a secure password policy for the BIG-IP system (11.x - 14.x)

    https://support.f5.com/csp/article/K15497

     

    Expiration Warning

    Specifies the number of days prior to password expiration that the system sends a warning message to a users. 

    The default value is 7, and the system allows the range of values from 1 to 255