Forum Discussion

Middle_Tier_Adm's avatar
Middle_Tier_Adm
Icon for Nimbostratus rankNimbostratus
Oct 09, 2018

NTLM Remote_User iRule

I am trying to show the NTLM REMOTE_USER in the header when an HTTP request is made. Below is the apache language I am using. Can anyone point me in the right direction for an iRule to do the same?

`
      AuthName "NTLM Authentication"
      NTLMAuth on
      NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
      NTLMBasicAuthoritative on
      AuthType NTLM
      require valid-user
      RequestHeader set REMOTE_USER %{REMOTE_USER}s
      Order allow,deny
      Allow from all

`

application delivery
iRules
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 09, 2018

    If you're authenticating the user via APM NTLM, the authenticated username will be in the session.logon.last.username session variable.

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 09, 2018

    I guess I should clarify, are you running APM? If so,

    when ACCESS_ACL_ALLOWED {
    HTTP::header insert Remote_User [ACCESS::session data get "session.logon.last.username"]
}