For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jfb_329380's avatar
jfb_329380
Icon for Nimbostratus rankNimbostratus
Oct 12, 2017

Use session.ldap.last.attr.userPrincipalName in an iRule

Hello,   In an iRule, I want to compare the userPrincipalName fetched from LDAP with the DN of an SSL certificate.   I have successfully extracted the email address from the certificate in a va...
application delivery
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 12, 2017

Hi,

are you sure the userPrincipalName is fetched by the LDAP query?

I recommend to do this check with variable assign instead of irule.

session.custom.result ==

expr {[mcget {session.ldap.last.attr.userPrincipalName}] == [mcget {session.cert.UPN}]}

this will return 1 if same value, 0 if different.