Forum Discussion

Michael_65398's avatar
Michael_65398
Icon for Nimbostratus rankNimbostratus
Feb 18, 2013

stuck on APM configuration issue, $500 for the first working solution!

 

so basically the scenario i am trying to accomplish is this: there is a intranet landing page (e.g. landingpage.company.com) that all user should see after loggin into APM. and depends on the user's AD group, there is different resources such as portal access/remote desktop and so on available to that users.

 

 

because when a user logs into APM, he only gets either a portal access webtop or full webtop, i have a problem:

 

if i configure the intranet landing page landingpage.company.com as the portal access webtop, user would not have access to different resources depending on AD group memebership.

 

if i configure a full webtop and assign that to the user after login, user will only see the full webtop listing all the resources he is entitiled to but he can not see landingpage.company.com

 

 

I have been stuck on this issue for a while and can not find a solution anywhere (devcentral, ask.f5, F5 tech support). so i am willing to pay $500 for the first working solution (APM configuration, irule or even a "hack").

 

 

text me at 310 869 4977 if you can help me

 

 

thanks

 

config
design

3 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Feb 19, 2013
    Would you be opposed to assigning your portal resource as a component of a full resource assign agent and display a link to it as a webtop icon? It may also be possible to "auto click" this icon on first access so that a second window/tab with your landing page portal pops up in front of the webtop (both windows will be open).

     

     

    A more complicated approach may require separate VIPs and access policies and a way to link the two together for the sake of authentication. All possible, but shooting for the simpler solution first.
  • Michael_65398's avatar
    Michael_65398
    Icon for Nimbostratus rankNimbostratus
    Feb 20, 2013
    Posted By Kevin Stewart on 02/19/2013 06:45 AM

     

    Would you be opposed to assigning your portal resource as a component of a full resource assign agent and display a link to it as a webtop icon? It may also be possible to "auto click" this icon on first access so that a second window/tab with your landing page portal pops up in front of the webtop (both windows will be open).

     

     

    A more complicated approach may require separate VIPs and access policies and a way to link the two together for the sake of authentication. All possible, but shooting for the simpler solution first.

     

    currently the landingpage.company.com is already configured as portal resource and show up as the first item in the list. i just have not found a way to "auto click"/"auto launch" it yet. if it can be auto launched as you suggested, it would be a good enough workaround

     

     

    i have also considered the 2 VIP approach. there is a devcentral article that might provide a solution https://devcentral.f5.com/wiki/APM.ShareAccessCookies.ashx but it does not work properly (see my posted comment for that article)

     

     

    since there is very little documentation on APM iRules, it is very difficult to figure out what the correct irule events/commands should be

     

     

    if you have any insight, i would love to get your 2c

     

  • Michael_65398's avatar
    Michael_65398
    Icon for Nimbostratus rankNimbostratus
    Feb 22, 2013

    i have stumbled upon a solution via irule:

     

     

     

    when CLIENT_ACCEPTED {

     

    ACCESS::restrict_irule_events disable

     

    }

     

     

    when HTTP_REQUEST {

     

     

    }

     

    if { [HTTP::uri] ends_with "vdesk/webtop.eui?webtop=/Common/Staff_Webtop&webtop_type=webtop_full" }{

     

    HTTP::redirect [landing page url]

     

    }

     

     

    }

     

     

    works well... can't believe the actual solution is this simple