For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Reaper19's avatar
Reaper19
Icon for Nimbostratus rankNimbostratus
Jul 21, 2014

Customizing error message, creating an iRule

Does anyone know if an iRule can be created to change the generic error message (“The username or password is not correct." "Please try again”) returned after an incorrect RADIUS or LDAP PW? I can try to customize the error, but we are using RADIUS Auth twice, once for AD and once for Multi-Factor from two different servers, when changing the message and customization it is changed and applied for both. We do use a Message box already when a user fails after 5 attempts.

 

Is there a way to either customize or create an iRule to only change the message when a user enters an incorrect PW the first time only for Multi-Factor?

 

Thanks

 

application delivery
devops
iRules

1 Reply

  • Reaper19's avatar
    Reaper19
    Icon for Nimbostratus rankNimbostratus
    Jul 22, 2014

    Thank you for the response. Unfortunately due to using two different RADIUS Auth servers in the Access Policy, one for AD and one for Multi-Factor if we change the error message for the first RADIUS AD Auth, the same error message will be used for the second Multi-Factor RADIUS server events due to the error codes being sent and identical. If there is a way to use an iRule to change only the error message for the same code sent from the Second RADIUS server that may help.