Forum Discussion
Tom_Lauwereins_
Nimbostratus
Jan 23, 2018Custom post AAA HTTP to vip on the same APM
Hi,
I want to do HTTP authentication with a custom post with IPv4 but can't get it to work. I used a VIP on the APM itself with a serverssl. The pool members is the AAA authentication server.
ltm virtual vs_smsapi_test {
destination 172.29.100.12:http
ip-protocol tcp
mask 255.255.255.255
pool pool_smsapi_test
profiles {
http { }
serverssl {
context serverside
}
tcp { }
}
source 0.0.0.0/0
source-address-translation {
type automap
}
vs-index 80
}
ltm pool pool_smsapi_test {
members {
212.113.89.36:https {
address 212.113.89.36
session monitor-enabled
state up
}
}
monitor https
apm aaa http /andrei/otp_smsapi {
auth-type custom-post
content-type url-encoded-utf8
custom-body "{\"recipient_phone_number\":\"%{session.logon.last.username}\",\"message\":\"%{session.logon.last.password}\",\"priority\":\"high\"}"
form-action /api/sms/
headers {
header0 {
name Content-Type
value application/json
}
header1 {
name Authorization
value "Basic xxxxxxx"
}
}
partition andrei
start-uri http://172.29.100.12
success-match-type string
success-match-value id
}
net self Vlan400 {
address 172.29.100.3/16
traffic-group traffic-group-local-only
vlan vlan400
}
When testing the connection from another PC to the APM enabled VIP for SSLVPN I don't see any traffic via a tcpdump leaving from the vlan400 interface to 172.29.100.12 when doing the HTTP AAA authentication and get this in the apm logs:
Jan 23 17:21:24 BIGIP-C debug apd[16514]: 01490000:7: modules/Authentication/Http/HttpModule.cpp func: "doHttpHeaderBasedAuth()" line: 115 Msg: a933e480: HTTP module: doHttpHeaderBasedAuth(): URL: http://172.29.100.12/api/sms
Jan 23 17:21:24 BIGIP-C err apd[16514]: 01490138:3: a933e480: HTTP module: authentication with 'test' failed: Curl perform failed: Failure when receiving data from the peer (56)
Jan 23 17:21:24 BIGIP-C debug apd[16514]: 01490111:7: a933e480: HTTP module: authenticateUser(): Curl perform failed: Failure when receiving data from the peer (56)
But the strange part is that I don't see any traffic leaving towards 172.29.100.12? Any ideas?
No RepliesBe the first to reply
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects