rsa pub key authentication when AAA is enabled

Question

Hello,we usually log in to our BIG IP with TACACs, working fine, now we'd like to have a special user, who should authenticate with rsa pub key.question: when I create a user, I can not define a password, I guess because of the AAA-Config, right?So I fear, this would only work, if we disable TACACS.If we configure the root-user with rsa pub key, there's still asking for Password.has anyone such a combination?

kgaigl · Answer

Hello Lucas.I mean, authenticate with a ssh rsa pub key like here:https://my.f5.com/manage/s/article/K13454

lucas_thompson · Answer

When you say "log in", are you talking about a CLI connection with ssh to the console and you're trying to authenticate with a ssh key, or are you using a TLS client certificate from or a browser to the web ui?

Forum Discussion

rsa pub key authentication when AAA is enabled

2 Replies

Recent Discussions

iRule resulting in too many redirects

When F5OS r2800 appliance reboots, interfaces configured at tenant level for VLAN are lost

cat and grep command for rst messages

iControl for Gtm wideip

Telemetry streaming to Elasticsearch

Related Content

F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator

Doing mTLS Authentication per URL

Enable telnet on SSH

Enable SAML Service Provider on F5 Distributed Cloud Application

Distributed caching of authentication requests with NGINX Ingress Controller