Forum Discussion

epaalx's avatar
epaalx
Icon for Cirrus rankCirrus
Jul 14, 2020

How to force administrator logout?

Hi Experts, What's sanctioned method to force administrator logout or end that administrative session - preferable by TMSH/CLI. This is for administrator who login via GUI (httpd) or shell (sshd). [...
application delivery
BIG-IP
TMSH
epaalx's avatar
epaalx
Icon for Cirrus rankCirrus
Jul 16, 2020

Hi Dario,

thank you for taking time and effort to provide complete answer. I erred by excluding critical proviso in my question - I should have written "How to force graceful administrator logout?"

My issue is when a fellow administrator is adamant that he logged-out, yet, I don't see "end=" message in SYSLOG or /var/log/audit .

Every enterprise-grade device has a means to force (graceful) administrator logout - for instance, in FortiOS, "execute disconnect-admin-session". Is it unreasonable to expect same in BIG-IP?

R's, Alex

PS. "Usernames connected through SSH can be checked by 'who'." - I believe F5-sanctioned method is "w" command.

 

 

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for MVP rankMVP
    Jul 16, 2020

    Hello Alex.

     

    I know want you mean, but this feature it doesn't exists in F5.

     

    Take into account that using a F5 is like using linux. In case of FortiOS you have a closed enviroment that allows you to get this type of features.

     

    Anyway, restricting httpd source IP is not less aggressive than using "execute disconnect-admin-session"

     

    PS. both commands exist in F5 ('who' and 'w'), use whatever you prefer.

     

    Regards,

    Dario.