For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eric_haupt1's avatar
eric_haupt1
Icon for Nimbostratus rankNimbostratus
Apr 03, 2019

APM LDAP Query Failure - not using fallback

I running an LDAP query in a policy that is performing   return [mcget {session.ldap.last.attr.userPrincipalName}]   I know this is working for known UPNs, but I'm not catching the exceptions ...
application delivery
BIG-IP Access Policy Manager (APM)
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 04, 2019

Hello.

In your ldap query validate the following point:

  • in your ldap query object you add the following attribute "

    userPrincipalName
    ", in "
    Required Attributes (optional)
    ".

  • second point, in branch rules, be sure that you modified expression from:

Expression: User is a member of CN=MY_GROUP, CN=USERS, CN=MY_DOMAIN

to 

Expression: LDAP Query has Passed

Keep me in touch.

regards