For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Christoph_Lange's avatar
Christoph_Lange
Icon for Altostratus rankAltostratus
May 15, 2013

radius authentication alert logging

I get a log entry, even though the user is properly authenticated - it's the same for ssh and http:   May 15 09:22:40 f5devicename alert httpd[12843]: pam_unix(httpd:account): could not identify u...
management
monitoring
nitass's avatar
nitass
Icon for Employee rankEmployee
May 23, 2013
can you try this? 

root@(ve11a)(cfg-sync Changes Pending)(Active)(/Common)(tmos) list sys syslog all-properties
sys syslog {
    auth-priv-from notice
    auth-priv-to emerg
    console-log enabled
    cron-from warning
    cron-to emerg
    daemon-from notice
    daemon-to emerg
    description none
    include none
    iso-date disabled
    kern-from notice
    kern-to emerg
    local6-from notice
    local6-to emerg
    mail-from notice
    mail-to emerg
    messages-from notice
    messages-to warning
    remote-servers none
    user-log-from notice
    user-log-to emerg
}
root@(ve11a)(cfg-sync Changes Pending)(Active)(/Common)(tmos) modify sys syslog auth-priv-from err
root@(ve11a)(cfg-sync Changes Pending)(Active)(/Common)(tmos)