Forum Discussion

SL's avatar
SL
Icon for Cirrus rankCirrus
Jan 21, 2015

Authentication assistance

Hi All

 

The Authentication mode that I am using is "Remote-AD". This is working perfectly as users are added to a group and permissions assigned accprdingly. We are using an Enterprise Manager to which the users log onto and it does the SSO for them to log onto the other devices.

 

What I am having an issue with is that certain scenarios a user needs to be able to log directly onto the required device and not via the Enterprise Manager. This becomes an issue when the device is not able to see the Domain Controllers and the user is not able to Authenticate with AD Credentials.

 

My Question is thus, what are my options regarding creating a local user that is able to authenticate locally when it is not able to see the Domain Controllers.

 

1 Reply

  • You can only have it one way or the other. If you enable remote auth for the BigIP the only local accounts are root and admin. If the devices are in a remote site then you might think about putting a replica domain controller in that site.

     

    Seth