Forum Discussion
dcasson_21085
Feb 23, 2011Nimbostratus
AD DC's behind F5....
We have several applications that are antiquated and not AD aware. They authenticate against a specific DC rather than to AD as a whole. So, typical AD load balancing will not work and we prefer not...
Hamish
Feb 23, 2011Cirrocumulus
Not really. Just a VS with tcp/389, SNAT if they're not routing back via the F5, translate IP and port (Or just IP actually should be fine if VS and servers are all :389). Persistence by srcip.
The monitor can probably be just a customisation of the built-in LDAP monitor (With the caveat some versions will follow LDAP referrals and mark the server as up anyway. You have to watch for that and customise to consider LDAP referrals as being down... Although that can be masked if the clients have the ability to follow the referrals AND have connectivity).
H
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects