For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sanjai_126162's avatar
sanjai_126162
Icon for Nimbostratus rankNimbostratus
Aug 03, 2015

AD query issue

Hi,   I am new to APM module.I have created the below AD query for one requirement.   Logon -> AD AUTH (Success) -> AD query[Failed]   CN="Global UR ENETAPPS QA IMDL", "Global UR ENETAPPS Mo...
BIG-IP Access Policy Manager (APM)
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 03, 2015

what is the expression of your branch?

which groups the user must belong to? when I read the string you post, I say the same as APM : "extra characters after close-quote"

If you want to evaluate 2 groups with a "or", the branch expression must be the following:

expr { [mcget {session.ad.last.attr.memberOf}] contains "cn=group2, ou=groups, dc=company, dc=local" || [mcget {session.ad.last.attr.memberOf}] contains "cn=group1, ou=groups, dc=company, dc=local" }