For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JoeTheFifth's avatar
JoeTheFifth
Icon for Altostratus rankAltostratus
Jun 21, 2017

Reset forgotten user password iRule = Sideband

Hi Guys,   Just discovered the sideband technique. I'm looking into crafting an irule to reset a user password in Active directory. I'm using APM to get the user loginname. BigIP LTM 11.5.4. Here ...
application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
JoeTheFifth's avatar
JoeTheFifth
Icon for Altostratus rankAltostratus
Jun 21, 2017

My plan:

 

  1. Build a lightweight IIS web site on my Web Server
  2. Add code (C sharp) to reset password and Set the 'Change Password at next logon' based on a string (username) received in the query example :
  3. Create an irule to perform a sideband connection => send the username and get a success result
  4. go on with the APM policy if result is OK.
  5. User will get a random password and will be asked to change it by APM on next logon

What do you guys think?