Forum Discussion

jsgibbs1's avatar
jsgibbs1
Icon for Nimbostratus rankNimbostratus
May 31, 2018

Different Password Policies

Is there a way to have different password polices for user accounts?

 

I am using local auth and need admin user accounts to expire after a certain amount of time. However, I also have service accounts that I don't want to expire. Can I do both?

 

I tried creating a separate partition for the service accounts but the Password Policy follows.

 

BIG-IP
LTM
security
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    May 31, 2018

    Hi,

     

    I don't think is possible. the only way to have separate policy is to have a remote auth for users (ldap, tacacs, ...), then of course admin an root stay local...

     

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    May 31, 2018

    https://support.f5.com/csp/article/K15497

     

    "When you have configured policy restrictions using the Configuration utility, policy restrictions apply to all user accounts"

     

    After reading this, my question was if was possible via tmsh, because they specified Configuration Utility.

     

    However, I don't see any difference in tmsh, so I'm assuming is the same as GUI.

     

    So, you can't do this if you use local authentication.

     

    You can use a remote authentication and setup the users in the authentication server. Admin/root will always be local.