For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

e0013192_143645's avatar
e0013192_143645
Icon for Nimbostratus rankNimbostratus
Feb 08, 2018

APM AD auth resticted by client source and client OU

I have a requirement to allow internal users to access to SharePoint if they come from our internal IP addresses and they are part of a specific OU. I have a separate requirement that will allow con...
application delivery
BIG-IP Access Policy Manager (APM)
e0013192's avatar
e0013192
Icon for Altostratus rankAltostratus
Feb 20, 2018

Yes this is a POC. I have removed the iRule and I'm just focusing on get the authentication based on the OU. This is what I see in the log.

 

AD module: query with 'OU=038-task,OU=Clients,DC=clientqa,DC=ent' failed: no matching user found with filter OU=038-task,OU=Clients,DC=clientqa,DC=ent (-1)

 

When I run a tcpdump between the F5 and AD I see a bindRequest(1) to "" not to the CN and OU i expect.