Forum Discussion

Glenn_32974's avatar
Glenn_32974
Icon for Nimbostratus rankNimbostratus
Apr 17, 2014

LDAP resource assign not working - AMP VPE-

Hello Folks!   I´m building an access policy to assign resources based on group membership. I'm using the "LDAP resource assign" option available in the VPE, however it seems to work only when th...
BIG-IP Access Policy Manager (APM)
deployment
security
Micah_Haarbrink's avatar
Micah_Haarbrink
Icon for Nimbostratus rankNimbostratus
Sep 23, 2014

Bobby, what version of the big-ip software are you running? Did you ever hear back on your support ticket? I had an LDAP group resource assign working properly in 11.4.1 and 11.5.1 but it breaks in 11.6.0. I have a support case open as well and am waiting for word back so I'll try to remember to post here with what I hear.

 

The config is such that I do an LDAP query and LDAP auth, I have verified in variables that the memberOf attribute returns the group that I am using, and although the access policy completes it does not recognize the group names I put in the ldap group resource assign. Resources with no group load fine. Resources with a group don't show up regardless of membership.