For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

roykidder's avatar
roykidder
Icon for Nimbostratus rankNimbostratus
Mar 13, 2014

Monitor question: 302 after login on Solarwinds Orion

I'm trying to write a health monitor (LTM 11.4.1 HF2) for the Solarwinds Orion web interface where I'm passing login credentials in the URI portion of the GET which looks like this:

 

GET /Orion/Login.aspx?AccountID=username&Password=password

 

Upon success of that, the IIS server sends back a 302 redirecting to another URI (/Orion/SummaryView.aspx?ViewID=1). My health monitor doesn't seem to work no matter what receive string I look for. If I have it look for content in the second URI, it fails. If I have it look for "Object moved" in the first URI, it fails. My send string looks like this:

 

GET /Orion/Login.aspx?AccountID=username&Password=password HTTP/1.1\nHost: hostname.fqdn\r\nConnection: close\r\n\r\n

 

If anyone has any experience with Solarwinds (or similar 302 redirects after login) send and receive string monitors, I'd certainly appreciate any pointers.

 

Thanks in advance, Roy

 

application delivery
health monitor
LTM
receive string
send string

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Mar 13, 2014

    Roy,

    Two things, I'd change the monitor to a HTTP 1.1 one, as default f5 health monitors are v0.9.

    So something like this:

    GET /Orion/Login.aspx?AccountID=username&Password=password HTTP/1.1\r\nHost:\r\nConnection: Close\r\nAccept: /\r\n\r\n

    Hopefully my syntax is correct here.

    Also, take a look at the following link as it may help Troubleshooting Health Monitors

    Hope this helps,

    N

  • roykidder's avatar
    roykidder
    Icon for Nimbostratus rankNimbostratus
    Mar 13, 2014

    Yes, the redirect page returns:

     

    Object moved

     

    Object moved to .

     

    Prior to realizing there was a redirect, I looked for the string "Orion Summary Home" which is content from the page the browser is redirect to. Then I tried "Object moved" for the receive string yet the monitor still failed.

     

    Thanks, Roy

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Mar 13, 2014

    Roy, the receive string when monitoring a client with a redirect should be something on the redirect page. I see you've tested this and it doesn't work.

     

    Have you tried running Curl from the f5 to see what is being returned on the redirect page?

     

    Rgds

     

    N