For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MrIB_64119's avatar
MrIB_64119
Icon for Nimbostratus rankNimbostratus
Sep 15, 2015

APM sso to vdi rdp sending wrong password variable

Hi. I created an vpe where a user must enter in the password field both password and pin. I extract the password and pin in 2 different variables, en use them to authenticate. that works great. But w...
BIG-IP Access Policy Manager (APM)
security
MrIB_64119's avatar
MrIB_64119
Icon for Nimbostratus rankNimbostratus
Sep 15, 2015

no problem.

 

yes i adjusted the secure parameter in the second variable, and the max logon attempts allowed was already on 1.

 

i don't think the problem is in de variable assing, but in sending the wrong value in session.logon.last.password to the vmware backend.

 

below is my whole policy, the token auth is removed because for testing purposes it was not required