For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Apr 02, 2021

ldap auth not setting %{session.ldap.last.attr.dn}

Hi   I have a ldapauth followed by ldap query and the query is not working I have a search filter of uniquemember=%{session.ldap.last.attr.dn}   But %{session.ldap.last.attr.dn} is not set ...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Apr 06, 2021

Seems like I have multiple issues going on. my ldap server is not serving up memberof attribute.

 

  • spalande's avatar
    spalande
    Icon for Nacreous rankNacreous
    Apr 06, 2021

    Please try to use memberof attribute as it worked as expected.

    "session.ldap.last.attr.dn" works as well but you would see if user is part of more than 1 group those will be populated as session.ldap.last.attr.dn.1 until session.ldap.last.attr.dn.n and you would have to use some outside the box expressions to catch the required membership of the group.