Forum Discussion

E_Shanahorn_185's avatar
E_Shanahorn_185
Icon for Nimbostratus rankNimbostratus
Jun 02, 2016

can you query an ldap group for its members in an irule

I'm trying to build the logic into an iRule to take an action when CLIENT_ACCEPTED = true for a member of an AD / LDAP group?  
BIG-IP
iRules
security
THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Jun 03, 2016

If you have APM provisioned/licensed, you could fairly easily build an access policy with VPE visual policy editor to check the machine info, make an LDAP or AD query for group membership and then assign proper pool resource based on the query result, possibly without any iRule involved. Is the client "human" or machine (ie client application) in your case?