Forum Discussion

NiHo_202842's avatar
NiHo_202842
Icon for Cirrostratus rankCirrostratus
Jun 30, 2015

Cannot get domain in iRule after APM logon page

Hi all. I'm trying to get the domain forest out of the user logon. I enabled 'split domain' on the APM logon page, added a None-type domain field with domain session variable but session.logon.la...
application delivery
BIG-IP Access Policy Manager (APM)
design
devops
iRules
LTM
security
  • kunjan_118660's avatar
    kunjan_118660
    Jun 30, 2015

    Don't really get the iRule used here.

    If you enable split domain, basically the logon agent will break the logon.last.logonname to logon.last.username and logon.last.domain. So user might enter the logonname like 

    user@mydomain.loc
    or 
    mydomain.loc\user

kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus

1) How the logonname is entered, the format ?

 

2) Can you do a sessiondump to verify?

 

3) which version are you having ? Tested working in 11.6

 

NiHo_202842's avatar
NiHo_202842
Icon for Cirrostratus rankCirrostratus
Jun 30, 2015
It seems it does work if we explicitly ask domain\ in the username. Thanks for the effort tough!