For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

stackempty_1218's avatar
stackempty_1218
Icon for Nimbostratus rankNimbostratus
Jul 25, 2014

iControl Rest Api Authentication/Authorization with Active Directory

Hello,   I noticed that when f5 is set to use remote authentication (active directory), I cannot authenticate to the rest api. I get "no user name {username} found.". But when its change to authen...
devops
iControl
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Oct 13, 2014

Hi,

 

there is a workaround in case you are using the REST API not via the management interface.

 

A virtual server rewrites the Auth header (it´s a basic authentication) to "admin" (passphrase is b64 encoded with basic authentication) after validating the users credentials inside the iRule. This approach will also allow to add client cert based user authentication and a source IP based ACL for REST API access. The request will be forwarded to a self-IP (via node command in iRule).

 

Thanks, Stephan