Forum Discussion
Add a string to an Access Policy variable
In my access policy I have the following variable set up:
session.ldap.last.attr.trimmedMembership = regexp -inline -all {CN=aPUMA[^,]+,} [mcget {session.ldap.last.attr.memberOf}]
This produces the example list depending on the user's LDAP group membership:
CN=aPUMAApp-Admin, CN=aPUMAApp-User, CN=aPUMAWeb-Admin, CN=aPUMASWeb-User
I want to add a new role, aPUMAApp-Design, to the list regardless of the user's group membership.
How do I modify the variable above to do this?
2 Replies
- Seth_Cooper
Employee
You should be able to have an additional variable assign as follows...
session.ldap.last.attr.trimmedMembership = expr { [concat "[mcget {session.ldap.last.attr.trimmedMembership}], CN=aPUMAApp-Design" ] }Let me know if this helps.
Seth
- Claud_13959
Nimbostratus
Yes, it works. Thanks a lot.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com