For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nathaneil0227_2's avatar
Nathaneil0227_2
Icon for Nimbostratus rankNimbostratus
Apr 25, 2016
Solved

Configuring LDAP Auth and Query APM

Hi All/DC Experts,   I am confused what I need to enter on this type of authentication.   Actually I already managed to import groups into f5. The problem is I can't authenticate.   Any sugg...
application delivery
authentication
BIG-IP
BIG-IP Access Policy Manager (APM)
ldap
query
security
  • Minn_62043's avatar
    Minn_62043
    Apr 25, 2016

    Normally, you would enter the search expression in SearchFilter to pull out the corresponding data from the LDAP.

    We would use this:

    (sAMAccountName=%{session.logon.last.username})

    in SearchFilter to query the LDAP record where logon username matches the sAMAccountName field in LDAP.

    SearchDN is the normally the base DN.

Minn_62043's avatar
Minn_62043
Icon for Cirrostratus rankCirrostratus
Apr 25, 2016

Normally, you would enter the search expression in SearchFilter to pull out the corresponding data from the LDAP.

We would use this:

(sAMAccountName=%{session.logon.last.username})

in SearchFilter to query the LDAP record where logon username matches the sAMAccountName field in LDAP.

SearchDN is the normally the base DN.

Nathaneil0227_2's avatar
Nathaneil0227_2
Icon for Nimbostratus rankNimbostratus
Apr 26, 2016
Minn Hi, Thanks for your response. I put the string to both LDAP query and LDAP Auth. Found out that the problem is that BaseDN of the Groups was different. Thanks. -Nat