For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

YossiV's avatar
YossiV
Icon for Nimbostratus rankNimbostratus
Nov 08, 2015

Email A copy to spesific Email after Generating a Soft Token (Google autenticator )

Hi all, after successfully deploying the two factor authentication with google, i want that after generating the OTP token from the Google Authenticator key (shared secret) generator web page, it will send me a copy of the requested user or the key. you see, if i have 1000+ on the company that i am no going to deploy the new OTP for each one. i want them to make the token by themselves (surf to the OTP generator site)

 

 

and i will get an email with their key, so i will be able to enter that key to the LDAP attribute is there any way to do so? what do i need to add to the IRULE ?

 

Great 10x for your help

 

2 Replies

  • YossiV's avatar
    YossiV
    Icon for Nimbostratus rankNimbostratus

    Hi 10x for your feedback, i solved the issue by editing the following Irule https://devcentral.f5.com/codeshare?sid=532 i added that between "HTTP::respond 200 content $ga_secret_http_resp TO } else { " HTTP::respond 200 content {

     

    as you can see below:

     

    Code  HTTP::respond 200 content $ga_secret_http_resp
    set mailfrom "it_security@spiralsolutions.com"
    set mailserv "172.30.144.3:25"
    set response "Hello,\n\n\nA new token has just created with the User: $account@$domain and the key is: $secret_b32"
     append response "\n
    set email "it_helpdesk@spiralsolutions.com"
    set conn [connect -timeout 3000 -idle 30 -status conn_status $mailserv ]
    set data "HELLO\r\nMAIL FROM: $mailfrom\r\nRCPT TO: $email\r\nDATA\r\nSUBJECT: New Token Generated\r\nMIME-Version: 1.0;\r\nContent-Type: text/html;charset=iso-8859-1;\r\n\r\n\r\n$response\r\n\r\n.\r\n"
    set send_info [send -timeout 3000 -status send_status $conn $data]
    set recv_data [recv -timeout 3000 -status recv_status 393 $conn]
    log local0. $recv_data
    close $conn 

    } else {