Hello Devs!
How's everybody doing?!
I'm trying to wrap my head around remote role groups. Authenticating any BIG-IP against AD/TACACs/RADIUS/LDAP is pretty easy. You point to correct server and voialá, you can authenticate.
But the thing is that giving any authenticated user role administrator seems a bit risky.
I know there is the feature for "Remote Role Groups". I tested it with AD and it was very straight forward to setup so only users from a specific group had role Admin.
Is it possible to use "Remote Role Groups" with TACACs and RADIUS? What would be the attribute string?
I ask this because it would be easier to thinker with remote role groups than trying to mess with tacacs/radius softwares.
Thanks!
