For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rmd1023's avatar
rmd1023
Icon for Nimbostratus rankNimbostratus
Oct 05, 2015

Authentication for iControl REST vs bigsuds/python icontrol

It looks like the SOAP-based iControl library requires a user have GUI access, which includes "auditor" role read-only access. iControl REST, however, seems to require "administrator" role with advanced shell access. Is this correct? I'm particularly puzzled by this as iControl mimics tmsh commands, so I'd expect it to just require tmsh privs.

 

Is there a way to have REST access with the credentials of a read-only "auditor" or "partition manager" role user?

 

Thanks!

 

application delivery
devops
iControl
iControlREST
LTM
management
security

2 Replies

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Oct 05, 2015

    Hello,

     

    You're correct. Fully privileged administrator rights are required to use the iControlREST API. There's a registered RFE (Request for Enhancement) and possibly this shortcoming will be addressed in a future release, but at this point, I'm not aware of any given ETA's.

     

  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Oct 05, 2015

    Just wanted to add.

     

    There is an option to filter incoming REST calls via an XML gateway. Takes some configuring though and requires third party software.

     

    /Patrik