removing authorization header for LDAP

Hi All,

 

 

I have looked at some iRule examples that show show to remove the authorization http header but have some hard time making it to work.

 

 

Basically, I have http traffic that needs to be authenticated using LDAP. But I want to remove the authorization http header on the server side. When the LDAP authentication is successful, the users are allowed to see the data.

 

 

I tried "request header erase" on the http profile but it erases it even before the user gets authenticated.

 

 

Also, I found the following irule in the forum but this also erases the authorization information from the header before the authentication.

 

 

when HTTP_REQUEST priority 501 {

 

Remove the Authorization header after the system authorization iRule runs (at priority 500)

 

if {[HTTP::header exists Authorization]} {

 

[serverside {HTTP::header remove Authorization}]}

 

}

 

 

Any ideas?

 

 

Meena