F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Feb 27, 2018
Solved

Management login via ldap broke on several devices at the same time

Strange issue...I have several F5 devices and they can connect to, communicate with, and see the LDAP servers....however all of these separate devices broke when authenticating to the management inte...
LTM
security
  • JWhitesPro_1928's avatar
    JWhitesPro_1928
    Feb 27, 2018

    Ok...for anyone who runs across this I found that if I deleted the 'userCertificate' attribute value on my active directory account it allowed me to login...I never used this for anything so the impact to me was minimal (it was an encrypting file system certificate that was NOT expired and had been there a while)...I will have to research with support why that caused the issue

     

    For whatever reason this was not an issue on 11.5.3 but 13.0 and 13.1 and 13.1.0.3 it wa

     

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Feb 27, 2018

The only two other things strange I'll add is a few of the devices that are an hour or two behind time zone wise broke after the original ones broke...

 

The other hopefully unrelated thing was I upgraded BIGIQ to 5.4HF2...however only two of the several broken devices are actually managed by BIGIQ...all of the broken ones actually were managed by BIGIQ in the past (they still say managed by BIGIQ in the GUI even though they are not). The two devices that log in fine still were never managed by BIGIQ.