Forum Discussion
trying to call external web service to determine VPN access
Hi Bob,
I was able to get this to work but had to make some changes to the way you are doing it.
First I created a simple php page to verify a MAC Address and give output.
working on getting php code uploaded as I am getting an error... this shouldn't stop you from getting your stuff working. This page is looking for "MacAddress" in the querystring as your example shows.
Now to the HTTP AAA config...
Authentication Type: Form Based
Form Method: GET
Form Action: http://full.server.name/mac_valid.php
Hidden Form Parameters/Values: MacAddress %{session.custom.mac_addr}
Successful Logon Detection Match Type: By Specific String In Response
Successful Logon Detection Match Value: the mac address isI also made one other change... in the VPE after the "Machine Info" and before the "HTTP Auth" I added a variable assign for the following...
session.custom.mac_addr = expr { [mcget {session.machine_info.last.net_adapter.list.[0].mac_address}] }I have seen issues with using the array list in certain instances so I forced it into a custom session variable.
In a GET request the form values are passed as query string objects instead of POST values. So this effectively does the same thing but allows the session variable to be passed in. I agree that the session variable should work on the "Form Action" line like you had it but unfortunately it doesn't appear to work that way.
Hope this helps!
Seth
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
