For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MHMHMH's avatar
MHMHMH
Icon for Nimbostratus rankNimbostratus
May 19, 2016

APM Pre-Authentication in front of Google Authenticator Generation iRule

Hi everyone,

i'm trying to configure pre-authentication in front of the google authenticator-generation rule. I've used following articel, and everything is working fine from the google auth. side of view.

devcentral.f5.com/articles/two-factor-authentication-with-google-authenticator-and-apm

The Part where i want to put pre-authentication (Logon Page with AD Auth) in front is following:

https://devcentral.f5.com/codeshare?sid=532

I've tried several things already:

  • iRule event and "when ACCESS_POLICY_AGENT_EVENT" in hte Rule
  • VS with irule attached and member of a pool - new VS for APM pre auth and as a resource the google generation pool (-> not working because of limitation, there is an SOL articel about that)

What i get in the log is this everytime APM is in front:

May 19 11:44:20 Snorre err tmm3[3992]: 011f0007:3: http_process_state_prepend - Invalid action:0x1090b1 (Client side: vip=/Testpartition/google_auth_preauth profile=http addr=10.10.10.1 port=443 rtdom_id=0 client_ip=10.1.1.25)

Any suggestions?

Many thanks, Mike

2 Replies

  • Cody_Green_1030's avatar
    Cody_Green_1030
    Historic F5 Account

    Mike,

     

    Check your iRule again. It looks like you have an error but there is not enough log data to determine the full issue.

     

    • MHMHMH's avatar
      MHMHMH
      Icon for Nimbostratus rankNimbostratus
      fixed it by changing HTTP::respond to ACCESS::respond -> now everything is working like expected.