Username and Password LDAP auth

I'd like to write a rule to authenticate a user based on thier username and password before they hit the backend server of a VIP. I would also like to pass that username and password in the Basic Authentication header. The LDAP server is a loadbalanced VIP on the F5. The LDAP server is fedora (formally netscape) Directory server. Any help with this would be appreciated. The users do not have certificates, but may in the future. A Great rule would check for a cert then fall back to username and password is the cert is invalid or unavailable.

 

Thanks,

 

Jake