For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason0's avatar
Jason0
Icon for Nimbostratus rankNimbostratus
Jun 06, 2017

HTTP AAA Server Configuration

I'm trying to setup a Tableau applicaiton server behind a Big-IP using Kerberos but the server admins are having problems with their configuration. As a fallback, I'm trying to setup a HTTP AAA server with custom post for the authentication type. I can't test the configuration unless the admins abandon Kerberos, and we don't have any other websites using HTTP authentication, but I wanted to go ahead and configure the other AAA server just in case. Can anyone provide any insight for these questions:

 

  1. I set the successful logon detection type to "By Specific String in Response" and I need to set the "Successful Logon Detection Match Value" to not -1. Is any REGEX syntax acceptable in this field?

     

  2. I need to send post data for the username and IP address. Can I pull these values from APM session variables, i.e. client_ip=%{session.user.clientip} ?

     

(Here's the tableau documentation for trusted tickets https://onlinehelp.tableau.com/current/server/en-us/trusted_auth_webrequ.htm)

 

application delivery
BIG-IP Access Policy Manager (APM)
No RepliesBe the first to reply