For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

karthik_sriniva's avatar
karthik_sriniva
Icon for Nimbostratus rankNimbostratus
Apr 11, 2005

EVENT ORDER

Hi,

 

I am really confused with the way the HTTP events are called in the Authentication iRULE.

 

The following is the order in which the HTTP events are fired

 

 

1. HTTP_REQUEST

 

2. HTTP_REQUEST_DATA (I am calling Radius Authentication in this event)

 

3. HTTP_RESPONSE

 

4. AUTH_WANTCREDENTIAL

 

 

What I do not understand is, how is HTTP_RESONSE getting called before AUTH_WANTCREDENTIAL.

 

 

I would appreciate if someone could clarify or let me know the mistake I am making.

 

 

Thanks.
application delivery
dev
devops
iRules

2 Replies

  • Brian_Gupta_115's avatar
    Brian_Gupta_115
    Icon for Nimbostratus rankNimbostratus
    Jun 25, 2005
    My *guess* would be that the response packet needs to be parsed before the system can determine if the response needs credentials.

     

     

    -Brian
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Jun 27, 2005
    It's possible that you are (unintentionally) releasing the request and auth is just taking a moment to get to the point where it needs the credentials and the response is beating it back... ???