Forum Discussion

Cory_Blankenshi's avatar
Cory_Blankenshi
Icon for Altostratus rankAltostratus
Sep 16, 2019

BIG-IP v14: Expired Password Prompt for Remote Auth Users

We recently upgraded to BIG-IP v13 to v14. We used remote authentication while on the previous version and users had no issue logging in with their AD credentials. After the upgrade, some of these us...
authentication
BIG-IP
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 16, 2019

Hi,

 

The configuration that allow to change password is to follow this procedure:

https://support.f5.com/csp/article/K15676

 

Modification need to be done in "logon page" you can find procedure in KB above. and when you set this configuration:

"If the user account password change interval time has expired, the user is still required to update their password. In this scenario, authentication relies on the last password set. The BIG-IP APM AAA configuration does not require Active Directory privileges beyond read-only access."

 

So check in the logon page if you have configured "change pwd" functionnality on the impacted services.

 

keep me in touch.

 

regards,

  • Cory_Blankenshi's avatar
    Cory_Blankenshi
    Icon for Altostratus rankAltostratus
    Sep 16, 2019

    Hi Youssef,

     

    This issue only comes up when users are attempting to login to the BIG-IP GUI. Any thoughts?

     

    Thanks again!