For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bfrancom_123272's avatar
bfrancom_123272
Icon for Nimbostratus rankNimbostratus
Sep 25, 2015

APM Issue Injecting New Authorization Header

I have a policy that uses an Active Directory Authentication, then an Active Directory Query for client authorization. The server side is "dumb." It uses basic auth for authentication. So I inject a ...
BIG-IP Access Policy Manager (APM)
design
devops
security
bfrancom_123272's avatar
bfrancom_123272
Icon for Nimbostratus rankNimbostratus
Oct 26, 2016

Thanks for the response. I'm the OP author, attempting to do the same thing: Overwrite the authorization header in any way after an 

LDAP Auth
event. Neither the 
variable assign
/
sso mapping
, nor the 
ACCESS_POLICY_AGENT_EVENT
seem to be able to do this in my limited experience/perspective. Today I'm going to turn up the logging and try to see what I'm missing. Bear in mind the same config works fine if I change it to 
AD Auth
as outlined in the OP.