Forum Discussion

HugoRL_337905's avatar
HugoRL_337905
Icon for Nimbostratus rankNimbostratus
Oct 24, 2017
Solved

Restricting AD Authentication to Authorized Users Only

Hello, I have an F5 i2000 load balancer, running Version 12.1.2.249.   I am configuring AD Authentication for the management interface, but I ran into an issue. AD Authentication is configured to...
BIG-IP
security
  • HugoRL_337905's avatar
    HugoRL_337905
    Oct 24, 2017

    The fix to my problem was the settings under "External Users". This group of settings has three settings: Role, Partition Access, and Terminal Access. It looks like these settings control the access restrictions that will apply by default to anyone that is able to authenticate to the remote authenticating server, in my case, the DC.

     

    By default this setting is set to "No Access", but it looks like it was changed in my configuration that is why any domain user was able to log in with Administrator rights. My current settings are (Access Restriction is working):

     

    Role: No Access Partition: All Terminal Access: Disabled

     

    Thanks again.

     

    Hugo

     

HugoRL_337905's avatar
HugoRL_337905
Icon for Nimbostratus rankNimbostratus
Oct 24, 2017

The fix to my problem was the settings under "External Users". This group of settings has three settings: Role, Partition Access, and Terminal Access. It looks like these settings control the access restrictions that will apply by default to anyone that is able to authenticate to the remote authenticating server, in my case, the DC.

 

By default this setting is set to "No Access", but it looks like it was changed in my configuration that is why any domain user was able to log in with Administrator rights. My current settings are (Access Restriction is working):

 

Role: No Access Partition: All Terminal Access: Disabled

 

Thanks again.

 

Hugo