For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Ho's avatar
Mike_Ho
Icon for Cirrus rankCirrus
Sep 25, 2008

Dynamic members attribute

Can someone describe an example of how to use the "Dynamic members attribute" option when using the LDAP resource group mapping method? The help text mentions a URL to point to, but it's not clear wh...
BIG-IP Access Policy Manager (APM)
remote access
security
Mike_Ho's avatar
Mike_Ho
Icon for Cirrus rankCirrus
Oct 14, 2008
Hi Mal, thanks for the reply. I am using 6.0.2 and the group mapping I'm talking about is a master group resource mapping. I do LDAP authentication as well but that works fine and is out of scope of this topic. In this case I have several thousand user DNs that need to be mapped to the master group in question, but the Domino directory can't support that many DNs in one group.

 

 

I'm really just looking for working examples of how the "Dynamic members attribute" group resource mapping works so I can evaluate whether it can help me solve my problem.

 

 

I checked to see if I can wildcard the group object DN in an LDAP group object resource group mapping method and you can not, at least not using notation like "CN=AuthorizedGroup*" and having group DNs "CN=AuthorizedGroup1" and "CN=AuthorizedGroup2" defined with members in LDAP.