Basic auth to authenticate against AD

Hi,

• Basic Auth is supported by APM and provide username / Password
• AD Auth is supported by APM which require username / Password

So Basic Auth against AD is supported..

Basic auth can be activated in 2 modes:

• default behavior of APM is
  • redirect user to /my.policy
  • request 401 authentication
  • authenticate provided credentials against authentication server
  • redirect user to Landing URI
• Clientless mode
  • request 401 authentication within an irule
  • authenticate provided credentials against authentication server
  • allow user if authenticated

Clientless mode has some limitations:

• POST are limited to 64KB (extendable to 25MB)
• not available without irule

you can use the following irule to use clientless mode

when RULE_INIT {
   set static::Basic_Realm_Text "Web Services Authentication"
}

when HTTP_REQUEST {    
    set apmsessionid [HTTP::cookie value MRHSession]
    if { [HTTP::cookie exists "MRHSession"] } {set apmstatus [ACCESS::session exists -state_allow $apmsessionid]} else {set apmstatus 0}
    if {!($apmstatus)} {
         Insert Clientless-mode header to start APM in clientless mode
        if { [catch {HTTP::header insert "clientless-mode" 1} ] } {log local0. "[IP::client_addr]:[TCP::client_port] : TCL error on HTTP header insert clientless-mode : URL : [HTTP::host][HTTP::path] - Headers : [HTTP::request]"}
    }
}

when ACCESS_POLICY_COMPLETED {
    Authentication request for non bowser user-agent session denied
   if { ([ACCESS::policy result] equals "deny") } {
      ACCESS::respond 401 noserver WWW-Authenticate "Basic realm=\"$static::Basic_Realm_Text\"" Connection close
      ACCESS::session remove
      return
    }
}