Forum Discussion

GVR_Dinesh_1748's avatar
GVR_Dinesh_1748
Icon for Nimbostratus rankNimbostratus
May 06, 2018

LTM user role issue

We had an issue where user roles has changed from resource administrator to operator for few users in LTM.  
BIG-IP
security
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
May 06, 2018

What issue you are seeing? Do you manage User Role on LB itself of third party device(i.e LDAP, Radius, etc)?

 

  • GVR_Dinesh_1748's avatar
    GVR_Dinesh_1748
    Icon for Nimbostratus rankNimbostratus
    May 06, 2018

    user accounts create in LB and authentication group map to the user profile in active directory. So it is like dual authentication.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 06, 2018

    You don't need to create user in LB device only declare role like below and call role in LDAP.

    Example

        BigIPOperatorGroup 
        attribute memberOF=CN=BigIPOperatorGroup,OU=BIP,DC=dean,DC=local
        console tmsh
        line-order 10
        role operator
        user-partition B

    Go through link for more information.

  • GVR_Dinesh_1748's avatar
    GVR_Dinesh_1748
    Icon for Nimbostratus rankNimbostratus
    May 07, 2018

    However we already setup the user accounts creation in F5 with mapping roles and map their role groups in AD. Right now is there any bug issue for the roles has been changed.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 07, 2018

    Oh! Open support case with F5.

     

  • GVR_Dinesh_1748's avatar
    GVR_Dinesh_1748
    Icon for Nimbostratus rankNimbostratus
    Jun 01, 2018

    Thanks for the support. The issue is not with F5 user profiles. Someone deleted the working user accounts so it didnt work.