Forum Discussion
SteveD1979
Cirrostratus
CirrostratusSending APM AD Query groups as a header
Hi I'm setting up an APM with Kerberos auth that also needs to authenticate group membership to the applications. They application owners also need to see which groups the users are members of to kn...
SteveD1979Cirrostratus
CirrostratusNo i still don't have this working. Sorry I had other projects going on. This is my irule right now and it will send all of the member of in CN=, DN=, DN= format. The header is just too long. I'm trying to figure out a way to split it with an irule or if i have to create a custom variable in the VPE and call that.
when ACCESS_ACL_ALLOWED {
HTTP::header replace USERID [ACCESS::session data get session.logon.last.username]
HTTP::header replace GROUPS [ACCESS::session data get session.ad.last.attr.memberOf]
}
Not sure if this is more in Lucas_Thompson's wheelhouse, or JRahm, or Kai_Wilke, but tagging them all just in case.
- Kai_Wilke
MVP
All of your tagged guys could have answered the question. So first come first served... 😉
Cheers, Kai
