For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bob_10976's avatar
Bob_10976
Icon for Nimbostratus rankNimbostratus
Sep 23, 2010

Illegal argument. Can't execute in the current context

Hello all,

 

 

We are wanting to apply the "Secure" attribute to just the ASP.Net session identifer via an iRule. We came up with the code below and it "appears" to work but I have the following error in the F5 GUI logs.

 

 

TCL error: Prod_SessionCookie_Secure - Illegal argument. Can't execute in the current context. (line 1) invoked from within "HTTP::cookie exists "ASP.NET_SessionId""

 

 

 
when HTTP_RESPONSE {
 if { [HTTP::cookie exists "ASP.NET_SessionId"] } { 
      HTTP::cookie secure "ASP.NET_SessionId" enable
    } 
 }

 

 

Any thoughts or suggestions?

 

 

Thanks,

 

Bob
application delivery
dev
devops
iRules

4 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 01, 2010
    Hi Bob,

     

     

    That's an odd one. I can't think of any scenarios where the HTTP::cookie commands should be invalid in HTTP_RESPONSE.

     

     

    Is the error in the Local Traffic (/var/log/tlm) log? Does it occur on every response? Which LTM version are you running?

     

     

    Aaron
  • turo's avatar
    turo
    Icon for Employee rankEmployee
    Oct 14, 2010
    Aaron,

     

     

    We have the exact same problem after upgrading from 9.3.1 to 9.4.8.

     

    We have multiple iRules assigned to one VS. Two of the irules have same event when HTTP_RESPONSE checking if certain HTTP cookie exists.

     

    For time to time we see the following errors in the ltm logs:

     

     

    tmm tmm[2209]: 01220001:3: TCL error: rule_JSESSIONID - Illegal argument. Can't execute in the current context. (line 1) invoked from within "HTTP::cookie exists JSESSIONID"

     

     

    any ideas what has changed from 9.3.1?

     

     

    -turo

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 14, 2010
    Hi Turo,

     

     

    I'm not sure what would have changed in 9.4.x to cause this. I'd suggest opening a case with F5 Support to see if they can find something.

     

     

    Aaron
  • turo's avatar
    turo
    Icon for Employee rankEmployee
    Oct 15, 2010
    Aaron,

     

     

    We will do that. Just tried if this is know issue.

     

     

    Thanks,

     

    -turo