For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mark_22062's avatar
Mark_22062
Icon for Nimbostratus rankNimbostratus
May 20, 2013

APM - AD Nested Groups Limited?

Hi there,   I am trying to configure remote access to an application using AD Query. The query is configured to check membership of a group "F5_Application", this group has a number of nested gro...
BIG-IP Access Policy Manager (APM)
remote access
security
Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
May 28, 2014

good tip, but I already use 11.5.1 and my log output for following irule gives me all group memberships.


when ACCESS_POLICY_AGENT_EVENT {
  set user [ACCESS::session data get session.logon.last.username]
  if {[ACCESS::policy agent_id] eq "logmemberof"} {
      set memberOfList [split [ACCESS::session data get session.ad.last.attr.memberOf] "|"]
      foreach x $memberOfList {
         log local0. "User $user in group: $x"
      }
  }
}