Forum Discussion
Need iRule to block user
Hi Expert, I received one requirement from user, where application owner wanted to block external user whoever will try to login application with username as 'admin or root'.
Is there any way to block through LTM iRule? Please suggest.
4 Replies
Hello,
If the application is using basic or ntlm authentication, you can parse Authorization header (basic) or decode ntlm token to retrieve the username. You have to parse the post request in case of http form. But definetely, depending on the authentication type used by your application, you can trap the username and take actions like blocking or logging.
- Samir_Jha_52506
Noctilucent
Hi Yann, Thank you very much for reply. User has AD authentication method. Parsing post option is good option but user don't want to add any single script application level. Is there any other way where SSH user also can be blocked.
- Yann_Desmarest_
Nacreous
Hello,
If the application is using basic or ntlm authentication, you can parse Authorization header (basic) or decode ntlm token to retrieve the username. You have to parse the post request in case of http form. But definetely, depending on the authentication type used by your application, you can trap the username and take actions like blocking or logging.
- Samir_Jha_52506
Noctilucent
Hi Yann, Thank you very much for reply. User has AD authentication method. Parsing post option is good option but user don't want to add any single script application level. Is there any other way where SSH user also can be blocked.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com