Forum Discussion

ichalis_37981's avatar
ichalis_37981
Historic F5 Account
Feb 13, 2013

ACA module and LDAP decoding

Does anyone know if the ACA module includes a BER decoder for LDAP responses?

 

Need to query an external LDAP server and efficiently extract information from the LDAP response and would like to avoid doing the BER decoding in iRules..

 

 

 

 

 

 

 

 

 

 

1 Reply

  • The short answer is no. There is current no BER/DER encoder in iRules.

     

     

    That said, while ACA LDAP is intended for auth, it can be used to make "quasi-arbitrary" queries. The results of these queries are available to iRules. Also, because ACA LDAP queries are executed by PAM, you'd necessarily need a layered TCP virtual behind your ACA VIP to manipulate the actual binary content.