Forum Discussion

Peter_Baumann's avatar
Peter_Baumann
Icon for Cirrostratus rankCirrostratus
Oct 30, 2013

APM LDAP Query for Group Member?

Hi all, Since we're using a standard LDAP Server with DN of ou=People and ou=Groups I try to get with a LDAP Query the Group Membership of a specific user. The Group entry in the LDAP is of objectCla...
BIG-IP Access Policy Manager (APM)
ldap
security
Matt_Dierick's avatar
Matt_Dierick
Icon for Employee rankEmployee
Oct 30, 2013

Yes, here you are.

 

First, make a full query, in order to check if attribute is saved :

2nd, make a full resource assign with an expression (you can use "contains" "==" "ends_with"...) :

 

Example of a complete "full resource assign"

 

You can check your variables in Access Policy > Reports. Have a look into ldap.last.attr.

 

Hope this help.