Forum Discussion
CirrostratusAPM Session Variable size limits?
Recently I've noticed a couple strange things with some of our session variables in APM. We use and Ad Query object to grab data from AD and one of the fields is memberOf, which for some of us can be rather large, especially since we use the Fetch Nested Groups option. We had an issue the other day where an iRule which checks that variable for a specific string to assign the user's landinguri couldn't find the expected group because it was being cut off (or else when copying it form to notepad++, there were a bunch of odd characters in the string (little boxes) after it was cut off.
Wondering if anyone else has seen this or knows of any limitations in either session variables of iRule tcl string size.
3 Replies
kunjanNimbostratus
If session.ad.last.attr.memberOf is truncated you are probably hitting,
357063-2 - Remove the 64K limit for Session DB variables.http://support.f5.com/kb/en-us/solutions/public/15000/100/sol15166.html
This is fixed in 11.5.0 HF1
Rabbit23_116296Also seeing this with memberof attribute it truncates to around ~12000 char length when I run a sessiondump. We're running TMOS 12.0, is there any setting where I can override this behaviour?- THi
I came to a possibly similar case. One user has memberOf attribute size 11770 bytes when fecthed with adtest. However the attribute contains a number of special characters and so some of the value string are converted to hex, causing the total size for APM being around 14-15KB. Looks like the attribute is truncated somewhere as a condition evaluation in VPE resource assign (after the AD Query) does not find values which are towards the end of the list..
Any ideas on a workaround?
