For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Sep 27, 2007

Preserving source IP when using LDAP

I have read up on using the XFF header and using the X-forwarder in an HTTP profile, which works great for HTTP connections but, what do I do when I'm using a SNAT with LDAP servers?

 

 

I would like to preserve the source address of the incoming connection so that it shows up in the LDAP log rather than the SNAT address showing up.

 

 

Is there anyway to do this with an iRule?

 

 

Any help appreciated.

 

 

Thanks,

 

Kevin

 

application delivery
dev
devops
iRules

3 Replies

  • Kevin_Nail's avatar
    Kevin_Nail
    Icon for Nimbostratus rankNimbostratus
    Sep 27, 2007
    Thanks for the information.

     

     

    What would the variables be in the iRule that I would use to insert the IP?

     

     

    Also, how would that work exactly, will it interfere with LDAP protocol? or hose up anything that is being passed?

     

     

    Sorry for so many questions, this is a new request for me as an LTM administrator and I don't know where to begin

     

     

     

    Regards,

     

    Kevin
  • VictorC's avatar
    VictorC
    Icon for Nimbostratus rankNimbostratus
    May 06, 2010
    Hi Kevin,

     

     

    Were you able to ever get the source IP on your LDAP servers? I have the same situation now using Oracle Internet Directory based on LDAP. If you can share, that would be great. I'm using LTM v9.x

     

     

    Thanks,

     

    Victor

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 12, 2010
    Answered here:

     

     

    http://devcentral.f5.com/Forums/tabid/53/aff/42/aft/1172299/afv/topic/Default.aspx

     

     

    Aaron