For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Titus_92107's avatar
Titus_92107
Icon for Nimbostratus rankNimbostratus
Mar 17, 2009

LDAP proxy - send write requests to a second pool member

We are trying to migrate our LDAP users from eDirectory to AD. Using Novell DirXML, we can sync most LDAP attributes to AD, but not the passwords. We use LDAP for our web based application authentication using CA Siteminder. Using Siteminder, our external users change their passwords using a link inside our site. One solution to our problem could be an LDAP proxy that when it receives a LDAP modify command for the password attribute, it also sends the command to the AD LDAP server, in this way in time, the passwords get in sync between eDirectory and AD. Can F5 do this using iRules?

 

Thanks.
application delivery
dev
devops
iRules

2 Replies

  • johns's avatar
    johns
    Icon for Employee rankEmployee
    May 04, 2009
    I have a similar requirement with LDAP, where I need LTM to parse the request and send to 2 different pools based on OU. If it is company.xyz.com, then it goes to pool1, and company.xyz.net, then pool2. Looks like this is possible looking at the LDAP proxy rule referenced.

     

     

    Also, looks like the LDAP binding in the rule is using the client's credential, correct?

     

    Thanks.