default LDAP rule modification - how to parse Domain Name

I'm working in an environment right now where we are implementing the ACA module on an LTM running 9.4.1 to offload Active Directory authentication.

 

 

The trouble I'm running into is that the back-end servers expect credentials in the form of "domain_name\username". Using the default LDAP rule, the LTM can not successfully query the directory if the user enters his credentials in that form. If the user just enters his username, the LTM is able to query the directory and get his authorization info, but when it passes that on to the back-end server, the back end server returns a 401 error because it is expecting

 

"domain_name\username" and just receiving "username".

 

 

Is there a modification to the default LDAP authentication rule that I can make to either strip the domain name from the text the user enters and re-insert it when passing the credentials to the back end server or just to add the domain name and slash before passing the credentials to the back end (though this way would require user re-training...)

 

 

Thanks in advance!