201 · Question #129
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related…
The correct answer is A. /var/log/secure. The question asks which log file to check on a BIG-IP device for issues with remote LDAP administrative user login failures.
Question
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related messages?
Options
- A/var/log/secure
- B/var/log/messages
- C/Nar/log/ltm
- D/var/log/user.log
How the community answered
(20 responses)- A90% (18)
- C5% (1)
- D5% (1)
Why each option
The question asks which log file to check on a BIG-IP device for issues with remote LDAP administrative user login failures.
The /var/log/secure file on BIG-IP devices records security-related events, including login attempts, authentication failures, and other access control messages. Problems with LDAP authentication for administrative users would be logged here.
The /var/log/messages file contains general system messages but is not specifically dedicated to security or authentication issues.
The /var/log/ltm file is specific to the Local Traffic Manager (LTM) module and records events related to virtual servers, pools, and nodes, not user authentication.
The /var/log/user.log is a general log file often used for user-space programs, but /var/log/secure is the standard for authentication/authorization specific events on Linux-based systems like BIG-IP.
Concept tested: BIG-IP log files for authentication
Source: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-system-log-management-12-0-0/2.html
Topics
Community Discussion
No community discussion yet for this question.