Forum Discussion
karthik_sriniva
Nimbostratus
Apr 12, 2005Multiple Auth
Hi,
Can someone post an example on how to do multiple authentication.
For example, first one could be radius auth and the next one could be ldap authentication.
Thank...
Robert_Decker_2
Nimbostratus
Mar 13, 2006I reloaded 9.1.0 Build 6.2 and was able to successfully use the rule below. I switched back to a system running 9.2.2 Build 76.6 and am experiencing problems. The configs are near identical on each F5 (the 9.2.2 system has more virtual servers as the 9.1.0 only has the ldap stuff). The 9.2.2 system "loads" the page 5 minutes after entering the credentials. The 9.1.0 system "loads" the page almost immediately after the ldap credentials are entered. Have you experienced the same type of problems? Could you confirm this? Is there a newer version of the os?
Thank you,
Rob
when CLIENT_ACCEPTED {
set ldap_authed 0
}
when HTTP_REQUEST {
set username [HTTP::username]
set password [HTTP::password]
set asid_ldap [AUTH::start pam default_ldap]
AUTH::username_credential $asid_ldap $username
AUTH::password_credential $asid_ldap $password
AUTH::authenticate $asid_ldap
HTTP::collect
}
when AUTH_SUCCESS {
if {$asid_ldap eq [AUTH::last_event_session_id]} {
set ldap_authed 1
}
if {$ldap_authed == 1} {
log local0. "entering auth success"
HTTP::release
}
}
when AUTH_FAILURE {
if {$asid_ldap eq [AUTH::last_event_session_id] } {
log local0. "entering auth failure"
HTTP::respond 302 Location "http://x.x.x.x"
}
}
when AUTH_WANTCREDENTIAL {
if {$asid_ldap eq [AUTH::last_event_session_id] } {
log local0. "entering auth want credential"
HTTP::respond 401
}
}
when AUTH_ERROR {
if {$asid_ldap eq [AUTH::last_event_session_id] } {
log local0. "entering auth error"
HTTP::respond 401
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
