For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
Nov 12, 2015

APM AAA LDAPS using a direct server configuration

Hi,   I have noticed that the option to use LDAPS in an APM AAA LDAP Profile only appears when using a pool configuration and not when using a direct configuration.   At first I thought this ma...
BIG-IP Access Policy Manager (APM)
deployment
security
AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
Nov 13, 2015

The answer from F5 support is - Yes, you do need to use a pool for LDAPS.

 

I was able to successfully implement a temporary workaround to my short term floating self-ip FW rule issue. I will eventually change to a standard Pool configuration.

 

Workaround involved setting up a helper virtual server which I pointed a "direct" LDAP AAA configuration at. The helper was configured with the server-ssl profile, a SNAT pool containing the non-floating self-ip and a pool containing the LDAPS server address.

 

Hope this clears up the matter for others.