Forum Discussion

Anthony_Gerace_'s avatar
Anthony_Gerace_
Historic F5 Account
Nov 03, 2005

Remote User Authentication

 

Hello,

 

Is there a way to determine through iControl if a device is using a remote user authentication method (LDAP/Radius)? Also is there a way to configure it via the iControl API?

 

 

Thanks.

 

 

 

Anthony
  • Loc_Pham_101863's avatar
    Loc_Pham_101863
    Historic F5 Account
    Yes, if a virtual server has been configured to use an Authentication profile, you can use iControl to configure or query what authentication method is being used. You'll want to check out LocalLB.ProfileAuth interface.

     

     

    Regards,

     

    Loc
  • Thanks Loc!

    Here are the relevant methods:

    enum AuthenticationMethod {
      AUTHENTICATION_METHOD_LDAP = 0
      AUTHENTICATION_METHOD_RADIUS = 1
      AUTHENTICATION_METHOD_SSL_CC_LDAP = 2
      AUTHENTICATION_METHOD_SSL_OCSP = 3
      AUTHENTICATION_METHOD_TACACS = 4
      AUTHENTICATION_METHOD_GENERIC = 5
    };
    struct ProfileAuthenticationMethod {
      AuthenticationMethod value;
      Boolean default_flag;
    };
    ProfileAuthenticationMethod[] 
    LocalLB::ProfileAuth::get_authentication_method(
        in String[] profile_names
    );
    void 
    LocalLB::ProfileAuth::set_authentication_method(
        in String[] profile_names,
        in ProfileAuthenticationMethod[] auth_methods
    );

    There are other methods in the LocalLB::ProfileAuth interface to get and set other attributes as well.

    -Joe
  • Anthony_Gerace_'s avatar
    Anthony_Gerace_
    Historic F5 Account
    I'm sorry I didn't make my question clearer, but I was looking for the Management Authentication Method. Specifically, is there a way to tell what authentication method the LTM is using for management users?

     

     

     

    thanks again.

     

     

     

    Anthony
  • Sorry about the misunderstanding. Currently the only way to configure this is through the GUI. We'll add an enhancement request to add support for an upcoming release.

     

     

    -Joe