For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jstaf's avatar
jstaf
Icon for Nimbostratus rankNimbostratus
Jun 05, 2013

can't get APM secure session variable value in iRule

Hello,   The above code does not work: the password value is empty.   when ACCESS_ACL_ALLOWED { set user [ACCESS::session data get "session.logon.last.username"] set password [ACCESS::se...
application delivery
dev
devops
iRules
brad_11480's avatar
brad_11480
Icon for Nimbostratus rankNimbostratus
Aug 27, 2013

I am running into similar and on 11.4 HF3. This is a VDI setup and need both the AD username/password and a SafeWord (RADIUS) token. Since VDI doesn't support anything other than RSA SecurID (for whatever strange reason), I'm looking at a workaround.

 

The thought was to have the user enter both the RADIUS token and the AD password all in the password field and parse it in the iRule.

 

However he session.logon.last.password comes back blank. Both with and without using the '-secure' option on the data get.

 

how can this information be obtained. I might use the username field if this becomes an obsticle, but that just doesn't seem too clean (well none of this is clean).

 

So how can one not only obtain the value that was entered for he password in the iRule, but also set the new value for it to be passed on.

 

thank you.....