Forum Discussion

umiotoko_95283's avatar
umiotoko_95283
Icon for Nimbostratus rankNimbostratus
Jun 05, 2012

Custom variable from LDAP

I have a VIP with APM using LDAP (Windows 2008 AD) for authentication, this much works fine. I need to grab some AD fields through the LDAP call and provide it to the application.     My though...
app sec
BIG-IP Access Policy Manager (APM)
security
umiotoko_95283's avatar
umiotoko_95283
Icon for Nimbostratus rankNimbostratus
Jun 20, 2012
OK, figured it out. APM log rule was LogonPage-->LDAPAuth-->Allow.

 

 

The LDAP fields are not brought over unless a LDAPquery is used, so modifying the rule to:

 

 

LogonPage-->LDAPAuth-->LDAPQuery---> Allow.

 

 

Fixed the problem. I didn't need the LDAPquery here, but by inserting it (member of domain users) we get all the LDAP fields back, so it was just a process problem. Doh !