For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sysAdm's avatar
sysAdm
Icon for Altocumulus rankAltocumulus
May 17, 2023

REST API access right

Hi all, We're running F5 LTM (version 14.1.4.x) and sorry for any newbie question. We're trying to perform some tasks through REST API to the LTM: 1. Check system status, e.g. curl -ks -H "Conten...
application delivery
rest
Paulius's avatar
Paulius
Icon for MVP rankMVP
May 17, 2023

sysAdm Is this user a local user? Is your F5 configured for remote authentication for user login? Typically if you have an F5 using remote authentication the only local users that work are root and admin.

  • sysAdm's avatar
    sysAdm
    Icon for Altocumulus rankAltocumulus
    May 18, 2023

    PauliusYes, the user is a local user.  We didn't configure our F5 for remote authentication while we only played and learn using REST with admin user only.     Would you advise how to configure F5 to enable remote user authentication and thus to use REST api ?

    Thanks  a  lot.

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      May 18, 2023

      sysAdm You do not need to enable remote authentication in order to use REST api. I was just making sure it wasn't enabled because if it was and you were using a local user, the local users are disabled when remote authentication is enabled. The exception to disabled local users with remote authentication is the root and admin user that come default on the F5.

      • sysAdm's avatar
        sysAdm
        Icon for Altocumulus rankAltocumulus
        May 18, 2023

        Paulius   Got it and thanks.   For the authorization issue we hit, since the user can issue the tmsh commands in SSH session but failed in REST api, I think the user has sufficient privilege in tmsh's perspective.  Will it be due to some other authorization control for using REST api ?   Thanks.