nerdexam
F5

201 · Question #129

Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related…

The correct answer is A. /var/log/secure. The question asks which log file to check on a BIG-IP device for issues with remote LDAP administrative user login failures.

Section 5: Troubleshoot a BIG-IP System

Question

Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related messages?

Options

  • A/var/log/secure
  • B/var/log/messages
  • C/Nar/log/ltm
  • D/var/log/user.log

How the community answered

(20 responses)
  • A
    90% (18)
  • C
    5% (1)
  • D
    5% (1)

Why each option

The question asks which log file to check on a BIG-IP device for issues with remote LDAP administrative user login failures.

A/var/log/secureCorrect

The /var/log/secure file on BIG-IP devices records security-related events, including login attempts, authentication failures, and other access control messages. Problems with LDAP authentication for administrative users would be logged here.

B/var/log/messages

The /var/log/messages file contains general system messages but is not specifically dedicated to security or authentication issues.

C/Nar/log/ltm

The /var/log/ltm file is specific to the Local Traffic Manager (LTM) module and records events related to virtual servers, pools, and nodes, not user authentication.

D/var/log/user.log

The /var/log/user.log is a general log file often used for user-space programs, but /var/log/secure is the standard for authentication/authorization specific events on Linux-based systems like BIG-IP.

Concept tested: BIG-IP log files for authentication

Source: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-system-log-management-12-0-0/2.html

Topics

#LDAP authentication#Log files#Troubleshooting#/var/log/secure

Community Discussion

No community discussion yet for this question.

Full 201 Practice