For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rgordon_01's avatar
rgordon_01
Icon for Nimbostratus rankNimbostratus
10 years ago

Can't change AD password through APM

Access policy uses AD Auth for authentication. AD AAA is using a pool with 2 members. I have priority group enabled. In the apm log it shows AD module: change password for 'username' failed: Passw...
BIG-IP Access Policy Manager (APM)
security
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
10 years ago

Try doing a packet capture while you are attempting the password change operation. I seem to recall was a very old defect where password changes failed when UDP 464 was blocked, and 11.5.1 is quite old. So perhaps this is the cause of the problem.

 

In any case, a packet capture should reveal the problem easily. Filter on port 464 (kpasswd), 88 (krb), and 53 (dns).

 

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
10 years ago

Thanks for reporting back! Glad it's working.