For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1gw_60162's avatar
1gw_60162
Icon for Nimbostratus rankNimbostratus
Feb 04, 2005

custom RADIUS authentication

I am new to the TCL and BIG-IP worlds, and am having difficulty figuring this problem out using the Config Guide for LTM. How would I go about writing an iRule to authenticate a client via RADIUS, th...
application delivery
dev
devops
iRules
Tao_Liu_90341's avatar
Tao_Liu_90341
Historic F5 Account
Feb 04, 2005
If you do mean to rewrite the HTTP authentication header, you can write a new radius auth rule with AUTH_SUCCESS event handler like this: 

 
 when AUTH_SUCCESS { 
    if {$tmm_auth_radius_sid eq [AUTH::last_event_session_id]} { 
       set newauth [b64encode [format "%s:%s" [HTTP::username] "xxxx"]] 
       HTTP::header remove Authorization 
       HTTP::header insert Authorization "Basic $newauth" 
       HTTP::release 
    } 
 }

Here, xxxx means the static password. You may replace [HTTP::username] with a static name too.