Forum Discussion

Nova_201357's avatar
Nova_201357
Icon for Nimbostratus rankNimbostratus
Mar 28, 2016

APM Dynamic ACL assignment from AD

Greetings! I had a static ACL applied to a Network Access Resource. In testing static assignment, it worked fine. So I took the same logic and formatted as a F5 ACL, put it in AD, in the test acc...
BIG-IP Access Policy Manager (APM)
dynamic acl
security
Nova_201357's avatar
Nova_201357
Icon for Nimbostratus rankNimbostratus

Hey there,

 

So for anyone who tried this, Brad is right. The ACL must be a single string with all the ACEs concatenated together. In my case, I had to clear out the AD attribute and paste the properly formatted ACL for it to work.

 

Thanks for the tips Brad!

 

BTW, F5 should consider documenting things like that!

 

Cheers, Mike

 

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Mar 28, 2016
Where do you think the best place would be to document it? This question comes up sometimes when people put characters like CRLF, or other things that don't translate well to session variables which are plain one-line ascii. In that case, it's auto-transformed to hex encoding.