For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Venkatesh_96090's avatar
Venkatesh_96090
Icon for Nimbostratus rankNimbostratus
Jul 10, 2013

IRule for LDAP Authentication

Hello All,   Thank you in first place for choosing to help me. I am new to f5 and apologies if my question turns out to be too stupid.   All I am trying to do is authenticate APM users via LDAP...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 10, 2013

The issue appears to be in the LDAP AAA configuration. Are you using a host name for the server, and if so is it resolvable? Can the BIG-IP reach the LDAP server via the required LDAP port (usually 389 or 636)?

 

 

You can test access to the LDAP server from the management shell with the ldapsearch command. Example:

 

 

 

ldapsearch -H ldap://10.70.0.1:389 -x -b cn=users,dc=mydomain,dc=com -D administrator@mydomain.com -w [password] [search criteria ex. cn=bob]

 

 

You need to be able to see LDAP traffic leave the BIG-IP for the LDAP server. I'd start with that before troubleshooting anything else.