Bug ID 2229613: F5OS Tenant Inoperative Due to Incorrect Permissions on /etc/nsswitch.conf File

Last Modified: Apr 26, 2026

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 21.0.0, 21.0.0.1

Opened: Feb 26, 2026

Severity: 2-Critical

Symptoms

Platform_agent cannot connect to api-svc-gateway, resulting in the tenant being inoperative. Repeated entries are found at /var/log/ltm log file: Feb 23 16:14:53 localhost.localdomain warning platform_agent[5887]: 01e10005:4: Unable to subscribe for stats.

Impact

The tenant is inoperative.

Conditions

A manually modified UCS archive that is loaded on the BIG-IP tenant has incorrect permissions/ownership of the ./etc/nsswitch.conf file. Once UCS is loaded, the system file: /etc/nsswitch.conf does not contain the proper permissions/ownership, e.g. [root@hostname:INOPERATIVE:] config # ls -lZ /etc/nsswitch.conf -rw-------. tester abc system_u:object_r:etc_t:s0 /etc/nsswitch.conf

Workaround

After loading the UCS, run the commands that update file ownership and permissions and restart platform_agent: chown root:root /etc/nsswitch.conf chmod 644 /etc/nsswitch.conf bigstart restart platform_agent

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips