For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

markj_58101's avatar
markj_58101
Icon for Nimbostratus rankNimbostratus
Feb 10, 2016

Thanks Seth

 

I have been looking at the logs and it seems that it fails on the AD Query:

 

Feb 10 14:50:44 testapm1 notice apd[21572]: 01490005:5: ad9e33e0: Following rule 'fallback' from item 'AD Query' to ending 'Deny'

 

Feb 10 14:50:44 testapm1 notice apd[21572]: 01490102:5: ad9e33e0: Access policy result: Logon_Deny

 

Right after that, it returns:

 

Feb 10 14:50:44 testapm1 info apd[21572]: 01490004:6: ad9e33e0: Executed agent '/Common/Access-Policy_end_deny_ag', return value 0

 

Then it starts returning all the details about my account (act_active_directory_query_ag.attr.xxxxxx) After it's finished returning all the AD session variables, the logs stop. That's when I get an error on the web page.

 

It's a bit strange, because for some reason it fails on the AD query but then it returns all the details about my account after that. I would have thought if it failed on the AD Query then it would stop right there because that branch goes straight to a Deny.