APM iRule Event

Hi,

you can evaluate tcl in variable assign instead of irule event. most of tcl commands are implemented in variable assign but some tcl command are not yet. add a ; at the end of every commands as APM remove new lines.

to extract UPN from certificate, create a variable assign with expression:

session.logon.last.certupn = 
set extension [string tolower [mcget {session.ssl.cert.x509extension}]];
return [string range $extension [expr {[string first "othername:UPN<" $extension] +14}] [expr {[string last ">" $extension] -1}] ];

if you want to create a variable which compare both strings:

session.custom.query_result = 
if { [mcget {session.logon.last.certupn}] contains [string tolower [mcget {session.logon.last.username}]]} { return 0 } else { return 1}

or create a branch with expression:

expr { [mcget {session.logon.last.certupn}] contains [string tolower [mcget {session.logon.last.username}]] }