03-Jun-2023 20:58
folks,
anyone encounter this error. unable to change the auth source from local to radius after the radius server and remote role groups. But on the GUI, can change from local to remote-radisus..
# modify auth source { fallback true type radius }
01070920:3: Application error for confpp: /config/bigip/auth/pam.d/radius/system-auth doesn't exist!!
Please create an auth configuration for radius.
Br, Prakash
Solved! Go to Solution.
31-Jul-2023 19:19
sorry for late. just figure out. have to execute below command to create the radius authentication file first which would avoid when change the authentiation method to radius.
#create auth radius system-auth
03-Jun-2023 21:45
@Prakin It seems the radius configuration you are referencing isn't in place.
04-Jun-2023 21:35
No, i have placed the configuration first in cli, create radius server and also remote role groups. when i tried to change from local to radius via cli it does not allow me. but when i try to change from local to radius in GUI it accepeted.
05-Jun-2023 04:56
@Prakin Something seems off with the CLI command that is being entered. I recommend going to the GUI, changing the configuration and then going to the CLI and entering "list auth source" to see what has changed that is different from the CLI command that you're entering.
04-Jun-2023
17:04
- last edited on
05-Jun-2023
04:55
by
Paulius
You may be missing the following step:
Create a RADIUS configuration object that references the RADIUS server using the following command syntax:
create /auth radius system-auth servers add { <server_name> }
Please see the following: https://my.f5.com/manage/s/article/K17403.
05-Jun-2023 05:38
I would also suggest a few more things. I *highly* doubt this is the issue, but heck, you never know!
- Be sure you are logged into the active unit via SSH console.
- Make sure the configuration are synced if this is an HA pair.
- Make sure the BIG-IP code version is the latest within the major code branch.
- Make sure you are logged into SSH console as a super user --- admin or root. Many times if a file doesnt exist, is because a user in *nix doesnt have proper permissions.
31-Jul-2023 19:19
sorry for late. just figure out. have to execute below command to create the radius authentication file first which would avoid when change the authentiation method to radius.
#create auth radius system-auth