For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason_Jernigan1's avatar
Jason_Jernigan1
Icon for Nimbostratus rankNimbostratus
Jan 10, 2007

Possible to query LDAP from an Irule?

I'm trying to figure out if it is possible to query LDAP for an attribute of a user then make a decision on the pool based on that attribute? If I could run a bash script or command and return a value...
application delivery
dev
devops
iRules
Jason_Jernigan1's avatar
Jason_Jernigan1
Icon for Nimbostratus rankNimbostratus
Jan 11, 2007
This is one of the concerns I thought of. However would it be possible to persist the attribute so that it only does the LDAP query for a new session? I think we could take the latency hit on the initial connection, our use case is that once users are logged in they stay logged in for long periods of time and we don't have huge numbers of users logging in. We are already doing LDAP authentication at the bigip. I'd like to give this a shot. If you can point me in the right direction that would be greatly appreciated.

 

Thanks,

 

Jason