Forum Discussion

Ed_Martens_3096's avatar
Ed_Martens_3096
Icon for Nimbostratus rankNimbostratus
Jun 30, 2017

are there limitations to session.ad.last.attr.memberOf

Hi,

 

For a big customer we have an AD connection where we fill the session.ad.last.attr.memberOf with the AD Query. Does anyone know if there are limitations to number of group? total characters in the variable? others?

 

If so, are they adjustable?

 

Thanks in advance..

 

application delivery
BIG-IP Access Policy Manager (APM)
LTM
  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus
    Jun 30, 2017

    I never tried but adding multiple CN to the branch didn't throw an error.

     

    You could try adding multiple CN to your branch on APM policy and test it out! I think it might work

     

  • Ed_Martens_3096's avatar
    Ed_Martens_3096
    Icon for Nimbostratus rankNimbostratus
    Jul 04, 2017

    Hi,

     

    This is not what I mean. When doing a AD Query the variable memberof. But when the Nested group option is enabled I get a lot of groups back, but not all. So I suspect that there is a limitation to variable. of character or of groups. I use the memberof in an iRule, and not within a APM