For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chandan_Jain_14's avatar
Chandan_Jain_14
Icon for Nimbostratus rankNimbostratus
Feb 24, 2014

AAA - HTTP Authentication APM

Hello,

 

I am trying One Time Password vai SMS in APM.and referring following document for the same. https://devcentral.f5.com/articles/one-time-passwords-via-an-sms-gateway-with-big-ip-access-policy-manager. I have configured iRule for OTP and now trying to configure HTTP Authentication - in AAA / APM but it fails to execute. SMS Gateway URL to send the SMS:

 

http://www.unicel.in/SendSMS/sendmsg.php?uname=XXXXX&pass=h%297Xt~3B&send=TEST&dest=919769714667&msg=Dear User Your one-time password for SSL VPN is Thank You.

 

If anyone can help me to configure HTTP Auth, I'd greatly appreciate it.

 

Thanks Chandan Jain 9769714667

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
security

4 Replies

  • Christian_30338's avatar
    Christian_30338
    Historic F5 Account
    Mar 11, 2014

    Hello, what version of APM software are you running? Newer versions of the operating system support SMS OTP as a standard VPE element without having to do any of the variable assigns or irule events discussed in this article.

     

    Christian

     

    • Chandan_Jain_14's avatar
      Chandan_Jain_14
      Icon for Nimbostratus rankNimbostratus
      Mar 11, 2014
      Hi, Thanks for your comment and we have BIG-IP 3600 devices running 11.2 with hotfix 10. we cannot upgrade the firmware as we are running 3 models on it. I can generate the OTP but facing some issues to send the MSG from F5 to SMS gateway. Unable to pass OTP parameters to SMS GW.
  • Kristoffer_O_52's avatar
    Kristoffer_O_52
    Icon for Nimbostratus rankNimbostratus
    Mar 11, 2014

    Please check you AAA-HTTP configuration. If you are using post follow this template

     

    http://www.unicel.in/SendSMS/sendmsg.php?uname=XXXXX&pass=h%297Xt~3B&send=TEST&dest=919769714667&msg=Dear User Your one-time password for SSL VPN is Thank You.

     

    Form Action: http://www.unicel.in/SendSMS/sendmsg.php

     

    Hidden Form Parameters/Values: uname XXXX pass password send TEST dest %{session.user.otp.mobile} msg Dear User Your one-time password for SSL VPN is %{session.user.otp.pw} Thank You.

     

    Please post your irule as well if this is not your problem

     

    Kristoffer

     

  • LD24_184287's avatar
    LD24_184287
    Icon for Nimbostratus rankNimbostratus
    Mar 25, 2015

    I am using SMSGlobal to send the OTP to users. I am facing a strange issue I can see in the reports in the current session that its been picking up the right mobile number from AD and assigning different OTP every time but for some strange reason its sending sms to the single user with the same OTP when different users are trying to login.

     

    For instance user A for the first time tries to login to ssl vpn, he receives the OTP. Now when user B tries to login to ssl vpn then user A receives the same OTP again and then if user C tries to access ssl VPN user A receives the same OTP again on his mobile. where as user C and B doesn't receive any OTP on there mobiles.

     

    But if I go and check the sessions under reports on F5 APM i can see there appropriate phones numbers and new OTP is assigned to all three users.

     

    This the form action http://www.smsglobal.com/http-api.php

     

    Hidden Parameters- action=sendsms&user=xxxxx&password=xxxxx&&api=1&to="%{session.user.otp.mobile}"&text="%{session.user.otp.pwd}"

     

    Any help will be highly appreciated.

     

    Thanks, LD