For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Christopher_Ach's avatar
Christopher_Ach
Icon for Nimbostratus rankNimbostratus
Jul 22, 2009

Can builtin LDAP monitor send a v2 request instead of v3

Hi

 

 

I have searched around high and low for an answer.

 

We have a customised LDAP installation that only accepts LDAP v2 queries.

 

 

I just want to app monitor 2 LDAP servers using a LDAP call.

 

 

From ethereal trace and LTM debug I can see that the issue seems to be the LDAP version that the LTM is using to make the call.

 

 

I believe the LTM is using LDAP v3 call.

 

Is it possible to get the LTM to make a LDAP v2 call using the builtin monitor?

 

 

To get around this problem I have setup an external monitor to run the LDAPSearch cli command on the LTM which runs a simple LDAPv2 queiry to a level down the tree and then I expect to see SUCCESS and I mark it as up. But im not sure this is the best and most efficient way of monitoring LDAP servers, but its the only way I can specify the V2 call.

 

 

Any advice would be great

 

 

Thanks

 

 

Chris

 

 

management
monitoring

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jul 23, 2009
    Hi Chris,

     

     

    I thought you might be able to add a config option like LDAP_VERSION 2 to the /etc/openldap/ldap.conf file, but v3 is still used. You might try opening a case with F5 Support to see if they have any tricks up their sleaves.

     

     

    Aaron