Forum Discussion

F5_SJ's avatar
F5_SJ
Icon for Cirrus rankCirrus
Feb 15, 2023

Local users account are not working in Big-iq.

I have created local users account with administrator role and permissions in F5 Big-iq to run some tests.

When I logout and login again with the user that I created, big-iq was giving me authentication failure message in both gui and cli. I used the correct password, verified audit logs just says authentication failed with no explanation.

Is this some bug or is it normal behavior of big-iq not to allow any local account other than admin.

application delivery
BIG-IQ

6 Replies

Sort By
  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Feb 15, 2023

    F5_SJ Any other local user that you create should work. Are you able to log in at all as this user or even the first login attempt doesn't work? Can you show us the settings for this new user?

    • F5_SJ's avatar
      F5_SJ
      Icon for Cirrus rankCirrus
      Feb 15, 2023

      Paulius :The first login attempt is not working.

      auth user new user {

      encrypted password xxxx

      partition Common

      partition access {

           all-partition {

                 role admin 

          }

      }

      shell tmsh

      }

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP
        Feb 15, 2023

        F5_SJ Based on that output this user will not be able to log into CLI at all but should be able to log into the GUI. I created a user using the same settings as what you provided on a BIG-IQ that I have access to and I was able to log into the GUI. If you have remote authentication configured on your BIG-IQ you do have to click the drop down menu on the login page for the BIG-IQ and change it to "local" in order for it to work properly. If you do have remote authentication configured such as TACACS+ configured and you do not see this option at login it has been disabled in the configuration and you will have to enable the option to make the appropriate selection. Other than what has been mentioned here, if this doesn't work I recommend opening a case with F5 to see if they have a solution to your issue.