External Posting to APM with dynamic URL

Hi Sajid,

Juste want to understand before your give you an answer.

You post something like that:

URL:

https://app/login

Payload:

username sajid

password password123

url https://trnapp01.example.com:443/appmanager/abc

That's right? you post the redirect url in payload with username and pwd?

I need to know exactly how is the format of your post

thank you regards,

Hi Youssef,

test posting code:

 <tr>    <td algin="left">Username</td>      <td align="left"><input name="username" type="txt"></td>

    </tr>

       <tr>     <td algin="left">Password</td>     <td align="left"><input name="password" type="password"></td>

    </tr>

      <tr>  <input type="text" name="txtURL" value="https://trnapp01.example.com:443/appmanager/abc" readonly>     </tr>

        <td colspan="2" align="center"><input type="submit" value="Logon"></td>

hardcode url for testing purpose only.

Hi,

can you remove thie line:

set posturl "https://trnapp01.example.com:443/appmanager/abc"

and replace it by this line:

regexp {^.*name=\"txtURL\" value=\"([^\"]+).*$} $rbody -> posturl

I just want to confirm if it fix your url problem, then I will provide you an optimized irule

regards

Hi Youssef,

Kindly explain more, I have no idea how to use regexp in the irule.

Regards,

Sajid

Hi Sajid,

I work as follows. when I write an Irule I do it at the simplest I validate that it works. and afterwards I optimize it.

In order to retrieve URL, I used “regexp”, Because I noticed that you post a form auth. So that’s mean that I have to retrieve information needed in Post Data.

How “regexp” work:

So first of you have to retrieve all payload (Post Data):

set payload [HTTP::payload]

In this payload you have to extract URL or other information (In our case URL)

So we can use “regexp” function, it allow us to retrieve a specific string of characters

regexp {^.*name=\"txtURL\" value=\"([^\"]+).*$} $payload -> posturl

^ and $:  match the begin/end of the payload

.*: matches any character

() : between parentheses is what we want to recover and put in the variable “posturl”

([^\"]+): means recover all the characters until “

$payload: payload where my regex applies

\: Since “ is used in the regular expressions I am obliged to the despecialized like this \”

Hope it’s clear.

Form more info check this:

http://www.tcl.tk/man/tcl8.4/TclCmd/regexp.htm

so if you have an Control service you can modify your Irule adding this line:

set payload [HTTP::payload]

regexp {^.*name=\"txtURL\" value=\"([^\"]+).*$} $payload -> posturl

regards

Hi Youssef,

Thanks for prompt response, but its not working for me.

Regards,

Sajid

Got this message (log local0)

Sep 16 19:13:22 B01 info tmm1[24290]: Rule /Common/iRule_APM_Ext_SAMLtAuth <HTTP_REQUEST_DATA>: ****txtURL:0 ***username:user123 ***password: and payload is=txtURL=https%3A%2F%2Ftrnapp01.example.com%3A443%2Fappmanager%2Fabc&username=user123&password=%40password123

from iRule

when HTTP_REQUEST_DATA {

  set payload [HTTP::payload]

set username [URI::query "?[HTTP::payload]" username]

set password [URI::query [URI::decode "?[HTTP::payload]"] password]

set gotURL [regexp {^.*name=\"txtURL\" value=\"([^\"]+).*$} $payload -> txtURL]

log local0. "****txtURL:$banner9url ***username:$username ***password:$password and payload is=$payload"

HTTP::release

}

I think URL decode required.

Hi Youssef,

Thanks for prompt response, url decode working fine. But I am getting empty password message.

Session variable 'session.ad.last.errmsg' set to 'empty password detected'

decoded payload is showing the right password.

but with posting to APM policy, password is empty.

Regards,

Sajid

glad that it could help you. do not forget to validate my answer :-). and do not hesitate if I can help you