Forum Discussion
Stefano_E__1814
Feb 25, 2015Nimbostratus
ACCESS::policy result "not_started"
Hi all!
I try to invoke a access profile but the result of "ACCESS::policy result" is not_started.
Why? Can someone help me?
This is the code
when HTTP_REQUEST {
....
if { $sessionID ne ""}{
The user in session,
TODO
} else {
The user not in session, check token
if {$logDebug}{log local0. "=>|$logId| User not in session\n"}
if {$logDebug}{log local0. "=>|$logId| sessionID empty, creating a new session"}
set sessionID [ACCESS::session create -lifetime 30 -timeout 30]
if {$logDebug}{log local0. "=>|$logId| new sessionID is $sessionID"}
call APM
HTTP::header insert "clientless-mode" 1
set ldapAPResultByToken [ACCESS::policy evaluate -sid $sessionID -profile "test_ldap_accessProfile" session.test.token $tokenFromHeader session.server.landinguri $uriRequested session.logon.last.logonname $tokenFromHeader]
if {$logDebug}{log local0. "=>|$logId| Executed /Common/test_ldap_accessProfile with token: $tokenFromHeader with result: $ldapAPResultByToken\n"}
set result [ACCESS::policy result -sid $sessionID]
if {$logDebug}{log local0. "=>|$logId| result: $result\n"}
set policyResult [ACCESS::session data get -sid $sessionID session.policy.result]
if {$logDebug}{log local0. "=>|$logId| policy.result: $policyResult \n"}
...
}
...
}
The logger print this:
- User not in session
- sessionID empty, creating a new session
- new sessionID is 1562e4dd6119e43dca7f7154c3b1a4cc
- Executed /Common/test_ldap_accessProfile with token: pippo with result: error
- result: not_started
- policy.result: not_started
- Max_Q_factorCirrocumulus
Were the requirements of the Access policy met on the virtual server that the iRule is attached to? The reason why I ask is that if the policy requires a connectivity profile, or a compression profile, etc. then the access policy might return the "not_started" result.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects