For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_325715's avatar
Brian_325715
Icon for Nimbostratus rankNimbostratus
Jul 26, 2017

fallback to local authentication for non-admin/root users

This question was asked a few years back:   https://devcentral.f5.com/questions/big-ip-ltm-first-authenticate-against-radius-then-with-a-local-account-of-last-resort I have a requirement to fa...
BIG-IP
security
TMOS
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Jul 29, 2017

This is not supported yet. Refer the article.

The BIG-IP system does not use local authentication as a backup method when remote authentication fails.

If your real need is to gain access for special non-admin/root users, you have to create those accounts locally on the box as exception. This would use local authentication than that of remote authentication specified.

tmsh create /auth user  role  shell  prompt-for-password