Forum Discussion

Jo_31162's avatar
Jo_31162
Icon for Nimbostratus rankNimbostratus
Jul 31, 2013

Users logging

Hi,   Is it possible to view (and log) with iRule a username of the clients that access an applicatrion server through the VIP on the BigIP with LTM module only?   Thank in advance   Brgds ...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 31, 2013
The bigger question perhaps is if LDAP is traversing the VIP? You also said port 636, so assuming LDAPS? Is it an LDAP client passing through a port 636 VIP, or is this another protocol entirely and LDAP(S) used in another way?

 

 

Just for semantics though, if this is an LDAP(S) VIP, and you're decrypting (and potentially re-encrypting) the SSL layer, then it would be possible to grab the BIND message in the LDAP stream. It's not intuitive, but it is possible.