For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aaron_l_134531's avatar
aaron_l_134531
Icon for Nimbostratus rankNimbostratus
Nov 08, 2013

Change Redirect Location for APM-OAM Response

When an unauthenticated user tries to access a VS that has the OAM WebGate enabled on it, is there a way to change the redirect sent back to the user using an iRule?   I tried to create an iRule f...
application delivery
design
devops
iRules
oracle
aaron_l_134531's avatar
aaron_l_134531
Icon for Nimbostratus rankNimbostratus
Nov 08, 2013

Kevin,

 

Yes, the /obrareq.cgi 302.

 

I have a sideband request that calls off to a service that does the authentication piece with OAM and returns an obssocookie, then the iRule does a set of the cookie, the APM/OAM WG do the session validation/ATZ on the user, and allow the user access to the protected resource. All of that is done without being directed to the standard obrareq + cred collect process.

 

The issue comes when a user's session in OAM becomes invalid (timeout/deleted). When that happens, I was looking to intercept the 302 the WebGate creates to the obrareq page.

 

Do you know if that is possible?

 

Thanks