For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wtl1_136682's avatar
wtl1_136682
Icon for Nimbostratus rankNimbostratus
Sep 16, 2014

Upgrade from 11.4.1 to 11.5.1 HF 4 causes LDAP server & webtops to stop working

We recently upgraded our APM test server to 11.5.1 HF4 from 11.4.1 EF 635.103 Once we upgraded the LDAP AAA server we created stopped working. When trying to log in once you hit the LDAP server it would start looping and trying again. Recreating the LDAP server with the exact same configuration seemed to fix this problem. A similar issue is happening with the webtop objects. It takes 2 or 3 trys for the webtop to come up and loops back through trying to get in or shows your the "Page can not be displayed" error. After several tries the webtop will finally come up. Reverting back to 11.4.1 EF partition everything works fine again. I got back up and hit the issues.

I would like to not have to replace the LDAP server everywhere in the policy and am not sure what is causing the webtop to not appear every time. Has anyone else seen this behavior? If so were you able to find a cause fix to the issue? currently I am not comfortable upgrading to 11.5.1 fully if this webtop piece will only work a 1/3 of the time. Thanks in advance

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
performance
security
upgrade

2 Replies

  • Angelo's avatar
    Angelo
    Icon for Nimbostratus rankNimbostratus
    Sep 17, 2014

    Try to run a dump on the VS to see what happen to the traffic. also see if you seeing failed connection on your ldap server.

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Sep 17, 2014

    Thanks for sharing your upgrade experience.

     

    From my experience, though not that of upgrading to v11.5.1, sometimes running "tmsh load /sys config partitions all" could work wonders.

     

    If that does not work, you might want to open a case with F5 Support and arrange a time for them to do a full investigation with you.

     

    And since you already know v11.5.1 does not work, you might want to try v11.6.0 just to see if there is any difference. You could always roll back in the same way.