For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tom_92690's avatar
Tom_92690
Icon for Nimbostratus rankNimbostratus
Nov 23, 2012

LDAP modify query

Hi fellow members,     We have following use case:   1) User logs in on F5 APM   2) F5 APM displays user information.   3) User can enter or update his e-mail address.   The user ...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 23, 2012
2 could be fairly simple. If you initiate an AD or LDAP query in APM after authenticating the user, the session cache will be filled with AD/LDAP data that you can either a) pass as HTTP headers to the application, or b) display in a customized message box in APM.

 

 

3 has a few options as well. As Hamish states, APM won't be able to do the modification, but you can definitely spin off to a sideband call. What you call and how you use the sideband is where it gets interesting. The best option, IMHO, is to point to another (internal) virtual server that load balances a web service of your design (on another box) that does the modifications and returns a result. Doing this on a simple "LAMP" box - Linux/Apache/MySQL/PHP, or any programmable environment that has the ability to touch AD, would be really straight forward.