Forum Discussion

sam_111661's avatar
sam_111661
Icon for Nimbostratus rankNimbostratus
Jan 30, 2009

authorization then authentication?

Is there a way I can pull attributes from LDAP before sending authentication request?

 

 

This is what I would like to achieve: a user will be prompted for credentials, after entering them I want the LTM to find if the user is authorized to use this service by pulling attributes from LDAP for this user and if positive then send the authentication request. This will prevent sending to LDAP each and every attempt from the internet and reduce the probability of locking out accounts in LDAP

 

 

Thanks

 

application delivery
dev
devops
iRules
  • sam_111661's avatar
    sam_111661
    Icon for Nimbostratus rankNimbostratus
    May 08, 2009
    I have managed to make this work by using the "Filter" in the LDAP server configuration on the LTM. I have set the filter to "attr=allowed". Now when the LTM looks for the user in LDAP it will look for "uid=username and attr=allowed" and will return a positive result only if the user=username has the attribute "attr=allowed" in LDAP; if the attribute doesn't exist the result will be user not found even if the user is there