For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

FredR_30652's avatar
FredR_30652
Icon for Nimbostratus rankNimbostratus
Dec 24, 2008

External LDAPs Monitor

Hello,     Running IG-IP 1600 9.4.5 Build 1086.1 Hotfix HF2.   I'm facing a problem with the standard LDAP Monitor SSH secured (it work fine without SSL but it's not the goal).   ...
management
monitoring
micah_64538's avatar
micah_64538
Icon for Nimbostratus rankNimbostratus
Jan 21, 2009
I had the same problem, and got this info from F5 after opening a support case:

 

 

For BIG-IP LTM 9.4.5:

 

 

LDAP monitors using SSL will not work out-of-the box. The following changes must be made to correct this.

 

 

1. Add the following line to /usr/etc/openldap/ldap.conf:

 

 

TLS_REQCERTnever

 

 

 

2. Add the following line to /etc/subdomain.d/usr.bin.bigd, inside the /usr/bin/bigd {} block:

 

 

/usr/etc/openldap/ldap.conf r,

 

 

 

3. Restart the subdomain

 

 

/etc/rc.d/init.d/subdomain restart