Forum Discussion

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Mar 29, 2016

Need iRule to block user

Hi Expert, I received one requirement from user, where application owner wanted to block external user whoever will try to login application with username as 'admin or root'.

 

Is there any way to block through LTM iRule? Please suggest.

 

4 Replies

  • Hello,

     

    If the application is using basic or ntlm authentication, you can parse Authorization header (basic) or decode ntlm token to retrieve the username. You have to parse the post request in case of http form. But definetely, depending on the authentication type used by your application, you can trap the username and take actions like blocking or logging.

     

    • Samir_Jha_52506's avatar
      Samir_Jha_52506
      Icon for Noctilucent rankNoctilucent
      Hi Yann, Thank you very much for reply. User has AD authentication method. Parsing post option is good option but user don't want to add any single script application level. Is there any other way where SSH user also can be blocked.
  • Hello,

     

    If the application is using basic or ntlm authentication, you can parse Authorization header (basic) or decode ntlm token to retrieve the username. You have to parse the post request in case of http form. But definetely, depending on the authentication type used by your application, you can trap the username and take actions like blocking or logging.

     

    • Samir_Jha_52506's avatar
      Samir_Jha_52506
      Icon for Noctilucent rankNoctilucent
      Hi Yann, Thank you very much for reply. User has AD authentication method. Parsing post option is good option but user don't want to add any single script application level. Is there any other way where SSH user also can be blocked.