APM access::session question

Unfortunately, the APM session table doesn't expose its elements like a collection or list, so you must address variables explicitly.

Kevin,

thx for your fast response. Maybe there is another way to achieve tha goal: my intention is to add the related LDAP attributes within the policy (AD query) and find this set of LDAP attributes in the session to inject it in the traffic to the backend as headers. Idea is to set the list of LDAP attributes only at one point in the policy so that the solution is dynamic i.e. I do not want to hardcode the attribute names also within the irule

Any further ideas on that?

That isn't going to be easy. The APM session table is neither a list nor an array, and cannot be queried for "all matching values". The LDAP attributes will fill the table upon a successful query and will be available, by name, from that point forward.

That said, you could technically create a list object beforehand of all the LDAP objects that you care about, then cycle through them. Example:

when ACCESS_ACL_ALLOWED {
    set ldaplist [list "cn" "sn" "description" "whenCreated" "whenChanged" "displayName" "name" "objectGUID" "lastLogoff" "lastLogon" "primaryGroupID" "objectSid" "sAMAccountName" "userPrincipalName"]

    foreach x $ldaplist {
        HTTP::header insert $x [ACCESS::session data get session.ldap.last.attr.$x]
    }
}

Got it, thing is is a valid option for - thx a lot for your support