For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

epaalx's avatar
epaalx
Icon for Cirrus rankCirrus
Aug 18, 2011

Creating local users when using Remote Authentication

Hi F5'ers,   I'd like to provision (some) local users even though Remote Authentication (using Radius) is provisioned.   F5 removed f5adduser (in 10.1.0), so, what's the sanctioned alternative? ...
basic
getting started
new to f5
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Nov 14, 2019

Hi Willy,

  • Enable "Fallback to Local" (System » Users » Authentication)
  • Create a user (System » Users » User List)
  • Run the below command:
echo "username" >> /config/bigip/auth/localusers
sed -ri 's/(localonlyusers LT_STRING_LIST.*)"/\1 \\{username\\}"/' /etc/confpp.dat
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Apr 08, 2021

Hi Stefan,

 

The file /config/bigip/auth/localusers is auto-generated and should not be manually edited. After a system reboot it is expected that this configuration will be lost.

 

You can workaround this, to allow local and remote users to work at all times, by creating a startup script to add the local users to /config/bigip/auth/localusers on every reboot. However, this is not officially developed or supported by F5.

 

REF: https://support.f5.com/csp/article/K11333640

Recent Discussions