AD authentication failed - check-host-attr is enabled by default using DO

[artgmolina]

Environment

• Declarative Onboarding Version: 1.27.0
• BIG-IP Version: 15.1.5

Summary

active directory authentication fails because DO enable by default the attribute check-host-attr which creates an issue. I think that the bug id https://cdn.f5.com/product/bugtracker/ID880625.html is triggered.

There is not any option to disable such attribute through declarative onboarding API, https://clouddocs.f5.com/products/extensions/f5-declarative-onboarding/latest/schema-reference.html#authentication-ldap

Workaround

After disabling the attribute by TMSH, active directory authentication starts working.

[dstokesf5]

Can you provide the tmsh command you used to work around the issue?

[Babou73]

modify auth ldap system-auth { check-host-attr disabled }

[dstokesf5]

Thank you for your feedback. I have added this issue to our internal product backlog as AUTOTOOL-2981.

[dstokesf5]

@Babou73 Are you currently setting the checkBindPassword property in your DO declaration?

[Babou73]

Sorry for this very late reply. I was setting the checkBindPassword yes, tried disabling it, and then it is working fine. Guess this can be closed.