For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mburnham_59608's avatar
mburnham_59608
Icon for Nimbostratus rankNimbostratus
Nov 22, 2011

Alter username before Radius auth

Hi all,

 

 

Using APM, I would like to append a realm to a username before sending to Radius for authentication.

 

 

So, the user would login with 'bob' and the Radius server would get, for example,

 

 

I've tried adding a variable assign between the logon page and the auth server. Using session.logon.last.username doesn't work.

 

 

I can obviously do this with an iRule by modifying the payload, but wondering if there's anything simpler?

 

 

Thanks much in advance,

 

 

Mark

 

 

app sec
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • jwham20's avatar
    jwham20
    Icon for Nimbostratus rankNimbostratus
    Dec 15, 2011
    Mark,

     

     

    I was poking around seeing if I could find an option to set a default auth domain. Nothing as of yet. It seems like in this case, an iRule might be the best (possibly currently only) option. I am going to keep searching to see if there is an option I'm missing.

     

     

    (side note: good idea!)

     

     

    --

     

    Josh
  • David_20479's avatar
    David_20479
    Icon for Nimbostratus rankNimbostratus
    Jan 23, 2012
    I am trying to do somehting similar.

     

    I want to change user@domain.com to domain\user

     

     

    Looking for REGEX syntax assistance with my APM policy.

     

     

    Something like:

     

    session.user = expr { [regsub\(.*\)@\(.*\)/\2\\\1} [mcget {session.logon.last.username}] ""] }