Forum Discussion

Cirrus

Jan 23, 2017

How to get group name CN from session.ad.last.attr.memberOf ?

Hi all, When I use the session.ad.last.attr.memberOf variable the group values are like: | CN=webaccess,CN=Users,DC=mydomain,DC=com | The question is how can I strip the first group na...

BIG-IP Access Policy Manager (APM)

security

boneyard

MVP

Jan 23, 2017

you can use tcl in a variable assign VPE to make this work

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-visual-policy-editor-11-5-0/5.html

some more info on splitting

https://devcentral.f5.com/questions/splitting-a-delimited-string-into-multiple-variables-in-one-line-with-tcl-split-versus-getfield

Help guide the future of your DevCentral Community!

What tools do you use to collaborate? (1min - anonymous)

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

GitHub Awesome-F5

Forum Discussion

How to get group name CN from session.ad.last.attr.memberOf ?

F5 Academy at AppWorld 2026

Introducing the F5 AI Assistant for BIG-IP

Recent Discussions

How can I get started with iCall

SSL Bridging and FQDN rewrite Policy

After upgrading from PeopleTools 8.59.11 to 8.61.11 F5 APM is not rewriting the internal URLs

Could not communicate with the system. Try to reload page.

F5 BIG IP laboratory license

Related Content

How to get group name CN from session.ad.last.attr.memberOf when there are multiple attribute value

Certified Kubernetes Administrator - Study Group

Intermediate iRules: Data-Groups

VLAN Group and Asymmetric Deployment

Configure HA Groups on BIG-IP

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS