For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ingebrigt_Maurs's avatar
Ingebrigt_Maurs
Icon for Nimbostratus rankNimbostratus
Nov 21, 2014

Clientless mode redirects on Deny

Hi ! I'm writing an access policy for a legacy webservice. Existing clients authenticate with Basic auth and can't follow redirects. To avoid redirects I enabled clientless mode:     when HT...
devops
Ingebrigt_Maurs's avatar
Ingebrigt_Maurs
Icon for Nimbostratus rankNimbostratus
Dec 08, 2014

I was able to solve this problem with something like this:

 

when ACCESS_POLICY_COMPLETED {
        set policy_result [ACCESS::policy result]
        switch $policy_result {
        "allow" {
        }
        "deny" {
            ACCESS::respond 401 content $static::actsync_401_http_body Connection close
            ACCESS::session remove
        }
        default {
            ACCESS::respond 503 content $static::actsync_503_http_body Connection close
            ACCESS::session remove
        }
}