Forum Discussion

dcasson_21085's avatar
dcasson_21085
Icon for Nimbostratus rankNimbostratus
Feb 23, 2011

AD DC's behind F5....

We have several applications that are antiquated and not AD aware. They authenticate against a specific DC rather than to AD as a whole. So, typical AD load balancing will not work and we prefer not...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Feb 23, 2011
Is it just LDAP? i.e. Port tcp/389? Or is it udp/389 as well? tcp/389 is easy, and easy to write a decent monitor for... Depending on how complicated you want the monitor to be you can either do it in a built-in LDAP monitor, or an external monitor.

 

 

For udp/389, you may have to use an external monitor... But that may also depend on whether the ldapsearch CLI command on the F5 can do LDAP over UDP... I'm not sure... (Sorry, don't have access to one ATM to check).

 

 

H