Forum Discussion

Michel_van_der_'s avatar
Michel_van_der_
Icon for Nimbostratus rankNimbostratus
Nov 10, 2004

4.6.2 ldap monitor question

We recently upgraded our lab F5 to 4.6.2. When creating monitors, we

 

noticed it is now possible to enable 'security' on the monitor

 

for LDAP monitors. The options are 'ssl', 'tls' and 'none'.

 

 

When looking at the bigip.config file looks like so:

 

monitor ldapsSecSED {

 

type ldap

 

use "ldap"

 

interval 10

 

timeout 31

 

dest *:*

 

username ""

 

password ""

 

base "dc=com"

 

filter "(&(objectclass=domain)(dc=whoohoo))"

 

security "ssl"

 

}

 

 

I don't see any way to modify this setting from iControl. How is

 

this done?

 

 

Thanks.

 

  • Loc_Pham_101863's avatar
    Loc_Pham_101863
    Historic F5 Account
    Unfortunately, 4.6.2 iControl SDK has not been enhanced to support this new feature. I'll enter an enhancement request for this in the next release. (CR 42533)

     

     

    For what it's worth, in iControl SDK 9.0, this feature is already fully supported.

     

    Loc
  • That is _very_ unfortunate. Not sure I understand why these two seem

     

    to be so disconnected at times.

     

     

    We need 4.6.2 specifically to deal with this, but now we can't

     

    configure the systems with iControl (which is how we do _all_ of

     

    our configuration management). That leaves us in a most uncomfortable

     

    position.

     

     

    What's the best way to raise this?

     

     

    Michel

     

  • 4.x and 9.x are different product teams and with different development schedules. This looks to be a feature that slipped through the cracks for iControl support. I will work with the 4.x team to see if this can get prioritized into 4.6.3.

     

     

    -Joe
  • :D Not sure that answered my observation regarding being disconnected,

     

    but I understand how sometimes things slip through the cracks.

     

     

    I would very much like to have this ASAP. Thanks for any help you can provide.

     

     

    Michel