Forum Discussion
Jason_Jernigan1
Nimbostratus
NimbostratusPossible to query LDAP from an Irule?
I'm trying to figure out if it is possible to query LDAP for an attribute of a user then make a decision on the pool based on that attribute? If I could run a bash script or command and return a value...
Hey Jason,
I've not done it on BigIP, but I've queried LDAP in some pretty odd circumstances, and can't think of a reason off-hand that you couldn't do a query via TCP.
The problem I see with it is more one of "best use". You're going to add latency. A lot of latency if you are doing it with each user - you've got enough traffic to warrant putting a BigIP in, so can you afford the cost of hitting an external LDAP server in an iRule that will get hit a LOT?
If so, let's talk. Like I said, I haven't done it on a BigIP, but I'm willing to play with it and see what we can get running, or offer you advice on where to look.
Don.
