For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nikolay_Matveev's avatar
Nikolay_Matveev
Icon for Nimbostratus rankNimbostratus
Jan 15, 2016

APM iRule to "replicate" password change between AD and stand-alone servers

Dear Community,   I have a quite tricky problem to solve and hope somebody can point me in right direction.   I have a single sign-on infrastructure where APM provides SSO across 3 VSs. AAA aut...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 18, 2016

Hi Nikolay,

 

Yep this is exactly what I mean. By using fixed passwords for the DB based Forms-based SSO you could get rid of the complex password sync mechanism at all.

 

And if the password are strong enought and protected from the eyes of your users, then you dont even need them to be unique per-user and also not changed on a regular basis. Change them only on demant, if you believe the password was getting compromized...

 

Cheers, Kai