Forum Discussion
NimbostratusLTM log filled with /Common/_sys_APM_Exchange <http_request> - Illegal argument (line 1) invoked from within "HTTP::username&q
Hi,
We recently upgraded to 11.6HF6 and started observing lot of following irule errors
01220001:3: TCL error: /Common/_sys_APM_Exchange - Illegal argument (line 1) invoked from within "HTTP::username" 01220001:3: TCL error: /Common/_sys_APM_Exchange - Illegal argument (line 1) invoked from within "HTTP::username"
But the catch is that I DON'T have any irule with name "sys_APM_Exchange" in the irule list. Before upgrade I was not seeing all these errors. I am using f5.microsoft_exchange_2010_2013_cas.v1.5.0 for Exchange template
Is anyone aware of this issue.
1 Reply
This happens when a client is sending an invalid HTTP Authorization header. It seems to happen sometimes with some versions of IOS for iPhones, etc. _sys_APM_Exchange is an internal (built-in) irule, along with the other _sys irules. The Exchange one is used to handle Exchange clients.
It can be safely ignored. If you'd like to get to the bottom of it, you can perform packet capture decryption to see what the actual contents of the authorization header is, or perhaps add another irule to just log all of the authorization headers sent from clients and their IP address. Note that this data will contain usernames and passwords, so must be protected.
