f5-common-python icon indicating copy to clipboard operation
f5-common-python copied to clipboard

Adding device to trust domain fails with BIG-IP version 13.0

Open jlongstaf opened this issue 7 years ago • 0 comments

When creating a cluster (e.g., active-standby HA pair), we see this error when using version 13.0:

icontrol.exceptions.iControlUnexpectedHTTPError: 400 Unexpected Error: Bad Request for uri: https://10.190.24.98:443/mgmt/tm/sys/application/service/
Text: u'{"code":400,"message":"script did not successfully complete: (The specified IP address is an address on this device.\\n    while executing\\n\\"tmsh::modify cm trust-domain Root ca-devices add \\\\{ 192.168.1.245 \\\\} name bigip-1 username admin password admin\\" line:1)","errorStack":[],"apiError":3}'

It seems the tmsh modify cmd trust-domain command changed in 13.x.

According to https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-system-device-service-clustering-administration-13-0-0/13.html, the command in 13.x has this format:

tmsh modify cm trust-domain Root add-device { ca-devices true | false ip_address } device-name device_name username admin password admin

instead of this format currently used in the f5-sdk and which works in 11.x and 12.x:

tmsh modify cm trust-domain Root ca-devices add { ip_address } name device_name username admin password admin

jlongstaf avatar Jan 30 '18 17:01 jlongstaf