For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eric_haupt1's avatar
eric_haupt1
Icon for Nimbostratus rankNimbostratus
Apr 03, 2019

APM LDAP Query Failure - not using fallback

I running an LDAP query in a policy that is performing   return [mcget {session.ldap.last.attr.userPrincipalName}]   I know this is working for known UPNs, but I'm not catching the exceptions ...
application delivery
BIG-IP Access Policy Manager (APM)
eric_haupt1's avatar
eric_haupt1
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

Ok - I shifted the logic. The input for the query is taken care of in the filter.

So for my success branch I use

expr { [mcget {session.ldap.last.queryresult}] == 1 }

and getting the expected results: 

LDAP query is good based on valid filter input = success
LDAP query fails based on input not found (no such object) = session.ldap.last.queryresult = 0 and fallback path is taken.