Forum Discussion
Marcos_Gaspar_G
Nimbostratus
Jul 19, 2017APM Resource assignment through CLI
Hello all
I am deploying a huge APM configuration, in the VPE I am using AD Auth and AD Query. The thing is that there are lots of users, and I need to assign particular resources for each user ...
Stanislas_Piro2
Cumulonimbus
Aug 03, 2017Hi,
I think you are trying to do complicated configuration for something quite simple.
you can :
- use Advanced ressource assign to assign resources based on the username
- use generic RDP with host value RDP_%{session.logon.last.username} if user E72074 have to connect to hostname is RDP_E72074 (you can also create a DNS CNAME in internal AD to do that)
- use an irule to assign resources
This irule uses a Data Group named user_resources_DG with value format: (with curly brakets)
{{resources Portal Access} {resources Application Tunnel} {resources Network Access} {resources RDP}}
when ACCESS_POLICY_COMPLETED {
if {[ACCESS::policy result] equals "allow" && [class match [string tolower [ACCESS::session data get session.logon.last.username]] equals user_resources_DG]} {
set resources [class match -value [string tolower [ACCESS::session data get session.logon.last.username]] equals user_resources_DG]
ACCESS::session data set session.assigned.resources.pa [lindex $resources 0]
ACCESS::session data set session.assigned.resources.at [lindex $resources 1]
ACCESS::session data set session.assigned.resources.na [lindex $resources 2]
ACCESS::session data set session.assigned.resources.rd [lindex $resources 3]
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
