For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Marco_Castro_11's avatar
Marco_Castro_11
Icon for Nimbostratus rankNimbostratus
Feb 05, 2014

APM 11.4.1 local user database password policy

Hi,

 

I know that Big-IP have password policy for system users. But What about for APM local DB users?

 

Regards, MC

 

4 Replies

  • Hi,

     

    You can design your own password policy by inserting an empty item between your login page block and your localdb auth block within your vpe. This empty item should have a branch fallback (password complexity check fail) and a Success branch with an advanced expression based on the password session variable. You can use a regex for example : ((?=.\d)(?=.[a-z])(?=.[A-Z])(?=.[@$%]).{6,20})

     

    or alternatively, you can modify login pages within customization panel and add javascript to check password complexity before posting it to APM.

     

  • Hi, I have tried first approach but i couldn't solve how can i manage to force to change password if password policy fail.

     

  • Hi, This is another challenge I'm currently solving by writing a script to update the localdatabase.

     

    Keep you informed once its available.

     

    In the meantime, I think it would be great to ask a RFE on that topic to F5 support.