For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Leav97's avatar
Leav97
Icon for Altocumulus rankAltocumulus
Mar 31, 2023

F5OS AD Integration

I'm not usually the person that sets up the AD integration on our hosts.  The person that normally configures it took one look at the new F5OS (1.4) and, well, I won't repeat their comment here.  I f...
security
Leav97's avatar
Leav97
Icon for Altocumulus rankAltocumulus
Apr 04, 2023

Sure, 

How do I add an AD group for admin access?

 

  • Leav97's avatar
    Leav97
    Icon for Altocumulus rankAltocumulus
    Apr 04, 2023

    I've walked through the documentation several times.  I have yet to find any information on how to add an AD group to admin access.

    • Jim_McCarron's avatar
      Jim_McCarron
      Icon for Employee rankEmployee
      Apr 04, 2023

      Leav97 I am far from an Active Directory expert, but my understanding is that you have to have an AD group created with a GroupID of 9000 for F5OS admin users. Something like this inside AD:

       

      # Define some security groups
      new-adgroup -name "f5os_admins"    -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9000}
      new-adgroup -name "f5os_operators" -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9001}
      new-adgroup -name "f5os_users"     -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9002}
      new-adgroup -name "f5os_limited"   -GroupCategory Security -GroupScope Global -OtherAttributes @{'gidNumber'=9999}
       
      Is your question more on how to configure the AD side of things, or how to configure the F5OS side? Is there a specifc area where the docs are not clear or need more context on the F5OS side?