Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

JoeTheFifth's avatar
JoeTheFifth
Icon for Altostratus rankAltostratus
Jun 21, 2017

Reset forgotten user password iRule = Sideband

Hi Guys,   Just discovered the sideband technique. I'm looking into crafting an irule to reset a user password in Active directory. I'm using APM to get the user loginname. BigIP LTM 11.5.4. Here ...
application delivery
big-ip
BIG-IP Access Policy Manager (APM)
JoeTheFifth's avatar
JoeTheFifth
Icon for Altostratus rankAltostratus
Jun 21, 2017

My plan:

 

  1. Build a lightweight IIS web site on my Web Server
  2. Add code (C sharp) to reset password and Set the 'Change Password at next logon' based on a string (username) received in the query example :
  3. Create an irule to perform a sideband connection => send the username and get a success result
  4. go on with the APM policy if result is OK.
  5. User will get a random password and will be asked to change it by APM on next logon

What do you guys think?

 

Daniel_W__13795's avatar
Daniel_W__13795
Icon for Nimbostratus rankNimbostratus
Jun 23, 2017

Just forgot to mention: We got trouble with using SHA1 signed certs. So better go for SHA256 certificates.