For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nikola_Tesla_19's avatar
Nikola_Tesla_19
Icon for Nimbostratus rankNimbostratus
Apr 28, 2015

Using iControl REST API in a non-admin role

I have a user that can make SOAP calls to query Pool and Pool members. I am attempting to switch to iControl REST. When I did a test I got back

 

{"code":401,"message":"Authorization failed: no user named svc-hpoo-tm found. Uri: Referer:null","restOperationId":7361248,"errorStack":["java.lang.SecurityException: Authorization failed: no user named svc-hpoo-tm found. Uri: Referer:null","at com.f5.rest.workers.ForwarderWorker.evaluatePermission(ForwarderWorker.java:411)","at com.f5.rest.workers.ForwarderPassThroughWorker.onForward(ForwarderPassThroughWorker.java:191)","at com.f5.rest.workers.ForwarderPassThroughWorker.onGet(ForwarderPassThroughWorker.java:321)","at com.f5.rest.common.RestWorker.callDerivedRestMethod(RestWorker.java:735)","at com.f5.rest.common.RestWorker.callRestMethodHandler(RestWorker.java:702)","at com.f5.rest.common.RestServer.processQueuedRequests(RestServer.java:1092)","at com.f5.rest.common.RestServer.access$000(RestServer.java:45)","at com.f5.rest.common.RestServer$1.run(RestServer.java:136)","at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)","at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)","at java.lang.Thread.run(Thread.java:722)\n"]}

 

Do I need to be admin? If so will this change in near future? They will not give me admin access.

 

Thanks

 

devops
iControl

6 Replies

  • BinaryCanary_19's avatar
    BinaryCanary_19
    Historic F5 Account
    Apr 29, 2015

    You should be able to get relevant permissions added to your account. Read the section "About iControl and RBAC for user accounts" for the iControl Rest Guide of version 11.6.0 to see how. The guide is available for download somewhere on this site if you search (sorry I don't have it handy).

     

  • gert_wolfis's avatar
    gert_wolfis
    Ret. Employee
    Dec 16, 2016

    The in the previous answer mentioned document (iControl Rest Guide of version 11.6.0) is a great start. I recently created a small writing about this topic, which includes use of that document and has a complete example with a Postman collection included. It is posted on Github.https://github.com/gwolfis/iControl

     

    Hope this helps anyone in their RBAC REST journey where BIG-IP is used.

     

  • wolfman_113593's avatar
    wolfman_113593
    Historic F5 Account
    Dec 16, 2016

    The in the previous answer mentioned document (iControl Rest Guide of version 11.6.0) is a great start. I recently created a small writing about this topic, which includes use of that document and has a complete example with a Postman collection included. It is posted on Github.https://github.com/gwolfis/iControl

     

    Hope this helps anyone in their RBAC REST journey where BIG-IP is used.