0

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone know if it is possible for the script to generate a kerberos ticket using keytab and then use the ticket to authenticate via tac/kdc. If possible, can you please point to relevant documentation/links? Thanks

vs_sa
  • 61
  • 1
  • 5

2 Answers2

0

For this to work, at a minimum, you would need to use another F5 outfitted with Access Policy Manager to achieve the automated login. The F5 is Linux based however, and you might conisider just using an SSH key to do this.

James Shewey
  • 182
  • 14
-1

You can authenticate client traffic to a virtual server using Kerberos:

Manual Chapter: Configuring Kerberos Delegation https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementation/sol_kerberos_delegation.html

You cannot use kerberos for admin system authentication though. Here are the supported admin auth methods:

Manual Chapter: Configuring Remote User Authentication and Authorization https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-3-0/26.html

Local admin database LDAP Active Directory TACACS+ Client SSL certificate / LDAP

What protocol do you want to use for your admin scripts (SSH or iControl)?

Aaron

Aaron
  • 39
  • 4
  • Welcome to Server Fault! Whilst this may theoretically answer the question, [it would be preferable](http://meta.stackexchange.com/q/8259) to include the essential parts of the answer here, and provide the link for reference. – Mark Henderson May 31 '13 at 03:01