Forum Discussion

ameli's avatar
ameli
Icon for Nimbostratus rankNimbostratus
Mar 27, 2023

Request for assistance with granting Bash access to Certificate Manager user

Hello, I am currently facing an issue on my F5 BIG-IP. I have created a user with the Certificate Manager role and I would like to grant them access to the Bash command line. I have followed the rec...
devops
security
Mohamed_Salah_'s avatar
Mohamed_Salah_
Icon for MVP rankMVP

Hello,

Unfortunately, I think you cannot give a non-admin user bash access. if you tried changing the terminal access on the user account, the only options for non-admin users are "disabled" and "tmsh". please check our the below link:

"By default, BIG-IP allows only remote users with Administrator role to access bash. Other remote user roles cannot be given direct access to advanced shell as they do not have an account defined in the /etc/passwd file, so a custom shell cannot be defined. As a result, the shell for all non-admin remote user roles defaults to tmsh."

"This is an expected behavior, however, local user who has Administrator or Resource Administrator roles can access bash."

https://my.f5.com/manage/s/article/K89001433?utm_source=f5support&utm_medium=RSS

Thanks,

 

ameli's avatar
ameli
Icon for Nimbostratus rankNimbostratus
Mar 28, 2023

Hello,

I am following up on my previous inquiry about granting access to the Bash command line for a non-admin user on my F5 BIG-IP.

Following the instructions provided in the link you shared, I modified the sshd_config file to allow the user to access tmsh. However, after doing so, I am no longer able to log in with SSH using the non-admin user's credentials. I receive the following error message: "Connection closed by X.X.X.X port 22".

Could you please advise on how to resolve this issue and allow the user to log in with SSH while still granting access to tmsh? I would greatly appreciate any assistance you can provide.

Thank you for your time and help.

Best regards,