irule for command exectuion

iRules have no access to TMSH commands. Presently there is no iRule/iControl access to the local DB.

ldbutil is not a TMSH i can execute them from config

/usr/bin/ldbutil --add --uname="LOGON" --instance="/Common/INSTANCE" -- password="PASSWORD" --change_passwd="0" --first_name="FIRST" --last_name="LAST " --email="EMAIL" --user_groups="GROUP" --login_failures="0" --locked_out="0"

Correction. I should have said no access to command line at all. This is by design. They are structured for very fast execution in memory and any IO or external program calls are avoided for that very reason.

Thanks for the info. Any suggestions to configure what i need in a diferent way?

I thought about what you want to do. The issue is wider than it appears. Because they have deployed localDB without any iControl access it cannot be updated remotely. It is almost as though this is version 0.1 and a proper implementation will come in later releases. I can't see any way to do what you want to do.

How about using iRule to log the user ids with password length than 9 and use cron job to trigger ldbutil to flip the change_password field for these users logged?

Thanks i will try that. I was trying to intercept password post in Logon page before localdb auth but without success.