Forum Discussion
epaalx
Cirrus
CirrusHow to force administrator logout?
Hi Experts, What's sanctioned method to force administrator logout or end that administrative session - preferable by TMSH/CLI. This is for administrator who login via GUI (httpd) or shell (sshd). [...
epaalxCirrus
CirrusHi Dario,
thank you for taking time and effort to provide complete answer. I erred by excluding critical proviso in my question - I should have written "How to force graceful administrator logout?"
My issue is when a fellow administrator is adamant that he logged-out, yet, I don't see "end=" message in SYSLOG or /var/log/audit .
Every enterprise-grade device has a means to force (graceful) administrator logout - for instance, in FortiOS, "execute disconnect-admin-session". Is it unreasonable to expect same in BIG-IP?
R's, Alex
PS. "Usernames connected through SSH can be checked by 'who'." - I believe F5-sanctioned method is "w" command.
Hello Alex.
I know want you mean, but this feature it doesn't exists in F5.
Take into account that using a F5 is like using linux. In case of FortiOS you have a closed enviroment that allows you to get this type of features.
Anyway, restricting httpd source IP is not less aggressive than using "execute disconnect-admin-session"
PS. both commands exist in F5 ('who' and 'w'), use whatever you prefer.
Regards,
Dario.
