For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

moark_63199's avatar
moark_63199
Icon for Nimbostratus rankNimbostratus
Jan 21, 2010

6900 F5 Perl Net-LDAPapi module installation problem

Hi,

 

 

We have systems using LDAP database servers and in front of the system, there are 4 Bigip F5 5100 and want to replace the old ones with F5 6900.

 

 

To monitor replications between ldap servers, there is a perl script that I attached using Net-LDAPapi module in perl at 5100 F5. The problem is that Net-LDAPapi can no be installed into 6900 F5. We have to use the script at new LB otherwise we can not replace the old F5.

 

 

I need help how to install Net-LDAPapi per module into 6900 F5 to run the perl script.

 

 

management
monitoring

7 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Jan 21, 2010
    Assuming you're running v10 (I only checked on 10.1 sorry), you can use URI::ldap

     

     

    Type

     

     

    man URI::ldap

     

     

    at the command line to see the man pages for it.

     

     

    H
  • moark_63199's avatar
    moark_63199
    Icon for Nimbostratus rankNimbostratus
    Jan 22, 2010

     

    You know, to install any module into perl, there should be "make" command and there is no "make" in 6900 bigip .
  • hwidjaja_37598's avatar
    hwidjaja_37598
    Icon for Altostratus rankAltostratus
    Jan 22, 2010
    As a workaround, you might want to install Net-LDAPapi into a directory on a CentOS VM and transfer it to your 6900. According to SOL3645, the base operating systems for v10.0 and v10.1 are CentOS 3.5 and CentOS 5.4, respectively.

    1. Compile the module on CentOS: 

        
  perl Makefile.PL PREFIX=/somewhere    
  make    
  make install

    2. Transfer /somewhere to your 6900

    3. Add this line to your perl 

        
 use lib "/somewhere";

    I'm not sure whether or not it will work. Just an idea ...
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jan 22, 2010
    I think the idea of not having make on BIG-IP is that F5 wants to discourage you from adding custom (untested by F5) software. If you'd like to make an official request to have packages added (back?) to LTM, you could open a support case. As Humphrey suggests, compiling a CentOS version should work though.

     

     

    Aaron
  • moark_63199's avatar
    moark_63199
    Icon for Nimbostratus rankNimbostratus
    Jan 23, 2010
    Humphrey, thank you for your response.

     

     

    I am not expert at CentOS so I could not fully understand what you mentioned in your response. Could you explain what I should transfer to 6900 Bigip?

     

     

     

     

  • hwidjaja_37598's avatar
    hwidjaja_37598
    Icon for Altostratus rankAltostratus
    Jan 31, 2010
    What I meant with transfer is uploading the binary from CentOS VM to your 6900 bigip.

     

     

    The first step is compiling the module in a custom directory (/somewhere) on a VM (CentOS). You need to setup a new CentOS VM.

     

     

    Next, copy the binary to your 6900 (e.g. tar cf - /somewhere | ssh root@<6900's ip address> "tar xf -")

     

     

    The steps are very high level instructions and don't come with the real commands, you need to convert it to your environment (e.g. change /somewhere).

     

     

    I personally don't recommend this way as this is not tested by F5. I would recommend the 'easier' way by exploring URI::ldap as per hamish's advice.