Forum Discussion

MichaelJordan_1's avatar
MichaelJordan_1
Icon for Nimbostratus rankNimbostratus
Mar 17, 2016

Forward ActiveSync Requests if user is member of BLABLA

Hi   I'm trying to deploy an APM policy for Exchange ifrastructure. Here is the hard part for my knowledge. I have to check user's membership and then forward them to "deny||allow" branch. Since, ...
application delivery
BIG-IP Access Policy Manager (APM)
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Mar 21, 2016

Hi,

If you need to validate only one group membership with nested group, you can use the following filter in LDAP query:

(&(sAMAccountName=%{session.logon.last.username})(memberof:1.2.840.113556.1.4.1941:=CN=YOURGROUPHERE,OU=GRP-WorkGRP,OU=USA-Groups,OU=USA,DC=na,DC=yourdomain,DC=com)(sAMAccountType=805306368))

This filter will request to AD if the user is member of the group, including nested groups.