For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Sep 04, 2015

APM - authentication ok, accessing content causes tmm1 to report an error

From /var/log/ltm

 

Sep 4 10:39:23 f5cmiprod err tmm1[29552]: 01490514:3: 00000000: Access encountered error: ERR_NOT_SUPPORTED. File: ../modules/hudfilter/access/access.c, Function: access_process_state_client_enforce_acl, Line: 10081

 

Sep 4 10:39:23 f5cmiprod err tmm1[29552]: 01490514:3: 00000000: Access encountered error: ERR_NOT_SUPPORTED. File: ../modules/hudfilter/access/access.c, Function: hud_access_handler, Line: 2528

 

  • This is after I authenticate with succes. So basically, the BigIP should recognise the login form from the backend.
  • Other applications work fine with my APM/SSO solution.

I'm using basic Forms authentication. I tried creating a brand new access policy for this Virtual server, same problem. Anybody else had this problem?

 

Thanks Vincent

 

BIG-IP Access Policy Manager (APM)
deployment
security

5 Replies

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Sep 04, 2015

    Hi Vinne,

     

    Can you please share you configuration with us so we can try to help identify the issue? It sounds like you have an application which you are trying to perform SSO to and after you successfully login SSO isn't working and you are getting the errors you listed. Is this correct?

     

    Seth

     

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Sep 07, 2015

    Hi Vinnie,

     

    looks like this is ACL conflict issue.Try move the ACL for this on top and acccess it.

     

    Also if you can share the configuration, we can have a look at it and see what is happening there.

     

    Regards, Jinshu

     

  • Vinne73's avatar
    Vinne73
    Icon for Cirrus rankCirrus
    Sep 07, 2015

    Hi Seth, Jinshu,

     

    I haven't been able to reproduce the problem. It seems that after applying the Access Policy a few times, and saving the Virtual Server settings, the problem went away by itself.

     

    I use custom iApps where I set the Access Policy. I have the feeling that sometimes my deployment of an iApp isn't "complete". I need to disable Strict updates, go to the VS, apply everything and then magically everything starts working? Bizar.

     

    Regards Vincent