Forum Discussion

GVR_Dinesh_1748's avatar
GVR_Dinesh_1748
Icon for Nimbostratus rankNimbostratus
May 06, 2018

LTM user role issue

We had an issue where user roles has changed from resource administrator to operator for few users in LTM.

 

BIG-IP
security
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 06, 2018

    What issue you are seeing? Do you manage User Role on LB itself of third party device(i.e LDAP, Radius, etc)?

     

    • GVR_Dinesh_1748's avatar
      GVR_Dinesh_1748
      Icon for Nimbostratus rankNimbostratus
      May 06, 2018

      user accounts create in LB and authentication group map to the user profile in active directory. So it is like dual authentication.

       

    • Samir_Jha_52506's avatar
      Samir_Jha_52506
      Icon for Noctilucent rankNoctilucent
      May 06, 2018

      You don't need to create user in LB device only declare role like below and call role in LDAP.

      Example

          BigIPOperatorGroup 
        attribute memberOF=CN=BigIPOperatorGroup,OU=BIP,DC=dean,DC=local
        console tmsh
        line-order 10
        role operator
        user-partition B

      Go through link for more information.

    • GVR_Dinesh_1748's avatar
      GVR_Dinesh_1748
      Icon for Nimbostratus rankNimbostratus
      May 07, 2018

      However we already setup the user accounts creation in F5 with mapping roles and map their role groups in AD. Right now is there any bug issue for the roles has been changed.