For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lee_Keener_5402's avatar
Lee_Keener_5402
Icon for Nimbostratus rankNimbostratus
Aug 27, 2015

iRule for HTTP Status and specific header not working

Greetings,   I have a web application developer asking me to be able to clear the WWW-Authenticate header when the HTTP status is 401. I wrote the rule below thinking it would work but it seems to...
application delivery
design
devops
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 27, 2015

A few things:

  1. Can you elaborate on wy you'd expect to see a WWW-Authenticate header in a 200 response? Even for a SPNEGO authentication it should only be valid in a 401.

  2. If you do:

    HTTP::header replace WWW-Authenticate ""

    that just inserts the header with an empty value.