Bug ID 749036: Some tmsh list commands may fail with message 'Password could not be retrieved' when SSLO is provisioned but not APM

Last Modified: Jul 03, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6

Fixed In:
15.0.0

Opened: Nov 06, 2018
Severity: 3-Major

Symptoms

Some tmsh list commands may fail while SSLO is provisioned but no urldb or APM modules are provisioned with the following message: 'Password could not be retrieved'.

Impact

tmsh command fails and posts the error: Unexpected Error: Password could not be retrieved. Note: Some 'tmsh list' commands with arguments do run. For example, 'tmsh list net vlan' provides correct output, but 'tmsh list' does not.

Conditions

-- SSLO is provisioned. -- Neither APM or URLDB are provisioned. -- Run the generic tmsh list command.

Workaround

There is no workaround other than provisioning APM or URLDB. Note: You can provision APM or URLDB even if they are not licensed. Although the full feature set is not available without a license, provisioning loads the daemons needed to support the generic 'tmsh list' command.

Fix Information

We hide the oath options when only SSLO is provisioned so that we do not require SQL to be up with SSLO. Oauth is not needed under SSLO.

Behavior Change