Forum Discussion
Keith_Richards_
Nimbostratus
Jun 26, 2007improved iControl authentication and running scripts locally
I wonder how everyone is authenticating connections to the iControl API? I have looked through the old posts and the only response I have seen shows that you basically have two options 1) get script t...
Jul 02, 2007
Keith, currently the BIG-IP management interface (including the mangagement GUI) does not support client certificates as an authentication mechanism. If and when it does, we'll look into getting the iControl interfaces to work with it as well. But in the mean time, you are stuck with the WWW-Authentcate headers.
As for running scripts on the BIG-IP, we don't recommend installing other software on the BIG-IP, and you'll have to check with support as to whether it will violate your service contract. With that said, all the modules are on the BIG-IP to SOAP::Lite with perl directly on the BIG-IP. I'd steer away from compiled code on the BIG-IP as I'm almost certain that that would violate your service contract (but check with support to make sure).
For your last question, if you have shell access to the BIG-IP, then there is no reason why you can't create a shell script that wraps bigpipe commands. You are right that you can't do everything with bigpipe (ie user management, certificate stuff, etc) but it does do almost all of the LTM configuration (ie anything stored in bigip.conf and bigip_base.conf).
-Joe
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects