Forum Discussion

Abdessamad1's avatar
Abdessamad1
Icon for Cirrostratus rankCirrostratus
Jun 02, 2016

LDAP admin authentication - nested group membership

Dear, I would like to give access to a BIG-IP (running version 12.1.0) to users based on their group membership. I have authentication working fine, and I can get group membership if the group di...
BIG-IP
security
TMOS
Daniel_Elkins's avatar
Daniel_Elkins
Icon for Nimbostratus rankNimbostratus
Oct 09, 2020

Working with version 15.1.0.5-0.0.0.8 I still have this issue, I have yet to find a recursive function, which prevents me from authenticating via LDAP due to my Active Directory membership policies using nested groups. When researching the TMSH documentation for 15.x, i see the only options for scope are "scope [base | one | sub]

" which means they are not allowing recursive lookups. That does not necessartily mean it doesn't exist as ther are sometimes hidden CLI commands to perform magic ... but for public consumption it appears they still do nto support recursive ldap queries.