Forum Discussion
CirrusLocal login failed to access gui
Hi
i have an remote authentication using active directory, i tried to access gui and sah used local user and failed, fallback authentication is enable and fallback user is true
on log secure
fallback is false ?
Anybody can help me
FYI
F5 will not fallback to local authentication just because the user is missing in AD. Fallback to local only happens if the remote server is completely unreachable (network down, server offline, etc.), not if the server responds with "user not found" or "invalid password."
5 Replies
f51Cumulonimbus
Hi Anzine321
When you have remote authentication (like Active Directory) set up on Classic BIG-IP, the system will only use local accounts (fallback) if the remote server is completely unreachable (for example, if the AD server is down or the network is disconnected). If the remote server is up and just rejects your login, fallback to local does NOT happen—even if you enabled fallback in the settings. That’s why you see “fallback: false” in your logs.
References:
Anzine321Thanks for information
i have a question, lets say account in active directory is not found, will f5 fallback to local ?
- f51
FYI
F5 will not fallback to local authentication just because the user is missing in AD. Fallback to local only happens if the remote server is completely unreachable (network down, server offline, etc.), not if the server responds with "user not found" or "invalid password."
- Anzine321
Is there any option how to use both local and remote authentication ?
- f51
By design, it's not possible to use both, remote and local authentication with other accounts besides root and admin. That means, that you can use the local root/admin account when you have set a remote authentication, but not other local accounts. You only can configure local authentication as backup if the remote authentication server fails.
K20114289: Can I use both remote authentication and local authentication simultaneously?
