For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Sep 01, 2015

APM Custom Expression - Search for string, if match, replace with

I wish I were better at this...   I currently have an APM setup for CAC authentication that pulls the users UPN and matches it to AD --Via: ( nothing special; via F5 "how to" )   set e_fields ...
BIG-IP Access Policy Manager (APM)
BIG-IQ
design
security
Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Sep 01, 2015

I need a variation of EDIPI@Mil. The certificates I am using are not CAC certs, the certs do not have a "othername" field or EDIPI@MIL. They are ordinary server CA certificates.

 

The Subject Name of the certificate is: DNS Name: foo.bar.lala.mil

 

Instead of UPN, I will match to the DistiguishedName of the AD User. The only AD suffix I have available and can have is @mil, hence the "replace" of the FQDN "bar.lala.mil" to @mil.

 

I usually start with the FED team, but I thought a greater user base would answer my question quicker and also share information.