AD Authentication For a VS in LTM

Hi,

To authenticate AD users, you must provision APM (additional license) and configure it.

Stanislas

When a user hit a VS, APM :

• check if user is already authenticated (presence of cookie).
• redirect to Authentication page ( uri /my.policy)
• validate authentication in multiple Database (AD, LDAP, RADIUS, TACACS, HTTP Server, ...)
• enable SSO (Basic, NTLM, Kerberos, ...)

Then, in LTM, you can redirect user to home page with irule or Local traffic policy

For more details on setting userID in HTTP header and sending user to landing page check out this solution: https://devcentral.f5.com/codeshare/insert-header-for-apm-policy.

The following irule allow you to redirect to home page and insert username as HTTP Header:

when ACCESS_ACL_ALLOWED {
    if { [HTTP::uri] eq "/" } {
        ACCESS::respond 302 noserver Location "/homepage/"
        return
    } elseif {![info exists APMusername]} {
        set APMusername [ACCESS::session data get session.logon.last.username]
    }
    HTTP::header insert "USER" APMusername
}