Forum Discussion

AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
Nov 12, 2015

APM AAA LDAPS using a direct server configuration

Hi,   I have noticed that the option to use LDAPS in an APM AAA LDAP Profile only appears when using a pool configuration and not when using a direct configuration.   At first I thought this ma...
BIG-IP Access Policy Manager (APM)
deployment
security
AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
Nov 12, 2015

The answer from F5 support is - Yes, you do need to use a pool for LDAPS.

 

I was able to successfully implement a temporary workaround to my short term floating self-ip FW rule issue. I will eventually change to a standard Pool configuration.

 

Workaround involved setting up a helper virtual server which I pointed a "direct" LDAP AAA configuration at. The helper was configured with the server-ssl profile, a SNAT pool containing the non-floating self-ip and a pool containing the LDAPS server address.

 

Hope this clears up the matter for others.