For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Leav97's avatar
Leav97
Icon for Altocumulus rankAltocumulus
Mar 31, 2023

F5OS AD Integration

I'm not usually the person that sets up the AD integration on our hosts.  The person that normally configures it took one look at the new F5OS (1.4) and, well, I won't repeat their comment here.  I f...
security
Leslie_Hubertus's avatar
Leslie_Hubertus
Ret. Employee
Apr 03, 2023

Hi Leav97 - can you please give more detail around your experience or problems you came across? I'm not seeing a question to answer, or specific feedback I can bring to the product team. 

Leav97's avatar
Leav97
Icon for Altocumulus rankAltocumulus
Apr 04, 2023

Sure, 

How do I add an AD group for admin access?

 

    • Leav97's avatar
      Leav97
      Icon for Altocumulus rankAltocumulus
      Apr 04, 2023

      I've walked through the documentation several times.  I have yet to find any information on how to add an AD group to admin access.

      • Jim_McCarron's avatar
        Jim_McCarron
        Icon for Employee rankEmployee
        Apr 04, 2023

        Leav97 I am far from an Active Directory expert, but my understanding is that you have to have an AD group created with a GroupID of 9000 for F5OS admin users. Something like this inside AD:

         

        # Define some security groups
        new-adgroup -name "f5os_admins"    -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9000}
        new-adgroup -name "f5os_operators" -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9001}
        new-adgroup -name "f5os_users"     -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9002}
        new-adgroup -name "f5os_limited"   -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9999}
         
        Is your question more on how to configure the AD side of things, or how to configure the F5OS side? Is there a specifc area where the docs are not clear or need more context on the F5OS side?