For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
May 01, 2014

Grabbing the user name from HTTP 401 Response from APM

I have users that want to use a custom login different from their UPN and samAccountName. I'm using the 401 because I have windows client apps connecting to a back-end server. I need to capture the ...
BIG-IP Access Policy Manager (APM)
design
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 01, 2014

Can you verify:

  1. In the 401 request to the client that there is only one WWW-Authenticate header defined and is using Basic?

    WWW-Authenticate: Basic realm="test"

  2. That the corresponding response is NTLM and not Basic.

    Authorization: Basic ZHVkZTp0ZXN0