For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thrillseeker_12's avatar
Thrillseeker_12
Icon for Cirrus rankCirrus
Jan 23, 2017

How to get group name CN from session.ad.last.attr.memberOf ?

Hi all,   When I use the session.ad.last.attr.memberOf variable the group values are like:   | CN=webaccess,CN=Users,DC=mydomain,DC=com |   The question is how can I strip the first group na...
BIG-IP Access Policy Manager (APM)
security
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Feb 13, 2017

Stanislas' works with spaces in CN, for I have just tested it with tclsh. If you are running v11.6.1, there is an issue "512130-4 : Remote role group authentication fails with a space in LDAP attribute group name", which has been addressed in HF2 that's just been released on the weekend. See its release notes.