For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
May 01, 2014

Grabbing the user name from HTTP 401 Response from APM

I have users that want to use a custom login different from their UPN and samAccountName. I'm using the 401 because I have windows client apps connecting to a back-end server. I need to capture the user name do a lookup against AD (I already have this part) and put the UPN into a SSO session variable. When the client application connect it seems to use Negotiate instead of Basic auth. Even if I have HTTP Auth Level set to basic.

 

I have read a lot of documentation but I'm still a little confused on my options with the HTTP 401 Response (APM module).

 

BIG-IP Access Policy Manager (APM)
design
security

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    May 01, 2014

    Can you verify:

    1. In the 401 request to the client that there is only one WWW-Authenticate header defined and is using Basic?

      WWW-Authenticate: Basic realm="test"

    2. That the corresponding response is NTLM and not Basic.

      Authorization: Basic ZHVkZTp0ZXN0