For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Luca_Comes's avatar
Luca_Comes
Icon for Cirrus rankCirrus
Jul 09, 2019

Google Authenticator on APM

Dear all, I'm trying to deploy two factor authentication to protect my application with Active Directory and Google Authenticator. I have now configured LTM and APM as descrbed here https://f5-agili...
application delivery
BIG-IP Access Policy Manager (APM)
Luca_Comes's avatar
Luca_Comes
Icon for Cirrus rankCirrus
Jul 11, 2019

HI Jason,

thank you, I'd also prefer to avoid this and my idea is to store the secret inside an AD attribute. I think writing on LDAP is simpler than do the same on datagroup. Is it possible from APM iRule or something like this?

 

Thanks

 

Luca

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jul 11, 2019

I'm not sure that's a safe path to walk down. You could potentially update AD attributes via an iRules sideband call to and AD API, but same cautions would apply. If only needed to be semi-permanent to reduce the frequency, you could store the code in table memory, which can be persistent until reboot, and *could* be queried by an external script to pull the data and update into your AD attributes.