For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chatan_Mistry_1's avatar
Chatan_Mistry_1
Icon for Nimbostratus rankNimbostratus
Jan 10, 2007

FirePass 4100 with multple AD authorisation

Hi!     I am stuck! I currently have a clustered FirePass environment using v5.5. We use RSA authentication, with AD authorisation against a single domain - we use the AD groups to identify waht...
BIG-IP Access Policy Manager (APM)
remote access
security
Melvin_Tan_6033's avatar
Melvin_Tan_6033
Icon for Nimbostratus rankNimbostratus
May 13, 2008
Dear all,

 

 

I am facing some issues with multiple domain authentication with dynamic group mapping and dynamic resource mapping. With the forest mode enabled in version 6.0.2, my users will be required to login using UPN mode.

 

 

And i need to point a certain group of user to authenticate using RSA 2-factor authentication.

 

 

However, the authentication with upn login is not recognized by RSA as it forward the full upn string (username@domain.com) to RSA. As RSA does not remove the realm info, it is unable to authenticate the user, thus returning a failed authentication.

 

 

Can i check is there any workaround for such setup?

 

 

Thanks,

 

Melvin