Get shorthand session values in irule from ldap query

You can use 'tclsh' on the BIG-IP to test such things.

[root@josiah-lab-ve:Active:Standalone] config tclsh

% set s {| CN=Cool_Administrators,OU=COOL Users,OU=Users,OU=UCOP,DC=COOLS,DC=Net | CN=Domain Users,CN=Users,DC=COOLS,DC=Net | CN=MAINS Users,OU=App-Groups,OU=MAINS,OU=Bus,OU=Ent,DC=COOLS,DC=Net | CN=Users,CN=Builtin,DC=COOLS,DC=Net |}

| CN=Cool_Administrators,OU=COOL Users,OU=Users,OU=UCOP,DC=COOLS,DC=Net | CN=Domain Users,CN=Users,DC=COOLS,DC=Net | CN=MAINS Users,OU=App-Groups,OU=MAINS,OU=Bus,OU=Ent,DC=COOLS,DC=Net | CN=Users,CN=Builtin,DC=COOLS,DC=Net |

% set matched [split [string map [list {| CN=} \0] $s] \0]

{} {Cool_Administrators,OU=COOL Users,OU=Users,OU=UCOP,DC=COOLS,DC=Net } {Domain Users,CN=Users,DC=COOLS,DC=Net } {MAINS Users,OU=App-Groups,OU=MAINS,OU=Bus,OU=Ent,DC=COOLS,DC=Net } {Users,CN=Builtin,DC=COOLS,DC=Net |}

% foreach match $matched { if { $match != "" } { puts [string range $match 0 [expr [string first , $match] - 1]] } }

Cool_Administrators

Domain Users

MAINS Users

Users