Forum Discussion

Nimbostratus

Feb 25, 2011

SharePoint 2007 with DoD CAC authentication

I have a Sharepoint 2007 installation that wants to convert to CAC authentication. We have a BIG-IP LTM running the 9.4.8 code and the ACA module. I need some guidance on what gets setup whe...

microsoft

partner

Anthony_Graber

Employee

Carlos,

You can use this iRule, applied to the virtual server, and change the ID in the VPE to CERTPROC.

    when ACCESS_POLICY_COMPLETED {
    ACCESS::session data set session.logon.last.username [ACCESS::session data get "session.ldap.last.attr.sAMAccountName"]
}
when ACCESS_POLICY_AGENT_EVENT {
if { [ACCESS::policy agent_id] eq "CERTPROC" } {
    if { [ACCESS::session data get session.ssl.cert.x509extension] contains "othername:UPN<" } {
        ACCESS::session data set session.custom.upn [findstr [ACCESS::session data get session.ssl.cert.x509extension] "othername:UPN<" 14 ">"]
    }
    }
}