For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Andy_Cohen_4986's avatar
Andy_Cohen_4986
Icon for Nimbostratus rankNimbostratus
Jul 28, 2015

APM External Login - Error Handling Customization?

Hi,

 

I have a client with an APM policy setup in front of a Web Application to handle LDAP authentication. An External Login page has been configured, to allow for a customised page which could be written to reflect the look and feel of the application sitting behind the VS. The External Login page actually just points back at the same APM VIP, and uses an iRule that looks for specific (login) URIs and serves up the login html resources via iFiles.

 

This all works fine. However, I am not sure how to capture errors, for example when authentication fails. At the moment, when performing the LDAP Auth event, if the username or password is incorrect for example, the user is redirected to the vdesk/hangup.php3 page which presents the standard system BIG-IP APM login error page. Is there any way to capture this and redirect them to a customized/external error page that could match the design of the external login page?

 

Thanks!

 

application delivery
BIG-IP Access Policy Manager (APM)
design
devops
iRules
LTM
security

1 Reply

  • Michael_Jenkins's avatar
    Michael_Jenkins
    Icon for Cirrostratus rankCirrostratus
    Jul 28, 2015

    I've done the same thing, and the way I solved this issue was by putting my external authentication functionality into a Macro in the VPE and then based on AD auth/failure either exiting the macro or setting a Loop endpoint that would loop through the macro up to 3 times. I also set a custom variable I add to the external logon page URL to specify which error message to display. It's hacky, but it works well.

    My better suggestion would be to customize the APM login page, which is fairly straightforward (). You can go into the login page through 

    Access Policy
    > 
    Customization
    > 
    Advanced
    > Change 
    Edit Mode
    to 
    Advanced
     > Access Profiles > [Policy Name]. From there you can drill down to find different files and customize them.