For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

avik_bose_1048's avatar
avik_bose_1048
Icon for Nimbostratus rankNimbostratus
Feb 08, 2009

Using 2 2factor authentication servers on Firepass

Hi,

 

I'm trying to use 2 different 2 factor authentication systems with Firepass.

 

One 2 factor authentication system is from "Actividentity" and the other one is for "SwivelSecure".

 

 

I have enabled "Dynamic master Group mapping", created two different landing uri's (Actividentiy & SwivelSecure) and created a dymanic master group mapping table with the Actividentiy uri mapped to master group Actividentity and Swivelsecure uri mapped to master group swivelsecure.

 

 

Now the authentication works fine , but to use SWIVELSECURE i had to modify the logon page of the firepass so that it displays the "Turing Image" from where users can extract their OTC.

 

 

Now to do this i had to place a right.inc in the default sandbox directory .

 

As a result even when users access the activeidentity uri they are getting the turing image .

 

 

Is there anyway i can get the turing image only for the swivelsecure uri.

 

 

I was under the impression that everytime a new uri is created on the firepass , a subdirectory by the same name is created under sandbox.

 

 

But from anyclient (that's the webdav client i'm using) to http://198.162.1.50/sandbox/SwivelSecure/ i get an error msg , that it's unable to connect

 

 

Any help would be appreciated.

 

Thanks a lot in advance.

 

Avik
BIG-IP Access Policy Manager (APM)
remote access
security

4 Replies

  • mal_57091's avatar
    mal_57091
    Icon for Nimbostratus rankNimbostratus
    Feb 10, 2009
    Hi Avik,

     

     

    I remember doing this and it worked fine. So i just checked the OLH (Online Help) and found:

     

     

    Managing multiple destinations

     

     

    Additionally, you can present unique content for multiple virtual hosts or URIs by creating corresponding folders containing the custom content you want to use. For example, to override the password recovery screen for a previously configured landing URI company1, create the file company1/resetpass.inc under the sandbox directory. The presence of a virtual host or URI customization overrides any corresponding global sandbox customization.

     

     

    So in theory this should all work out!

     

     

    Cheers,

     

    Mal
  • avik_bose_1048's avatar
    avik_bose_1048
    Icon for Nimbostratus rankNimbostratus
    Feb 10, 2009
    Hi Mal,

     

    Thanks for your response. But i'm still not very clear how to configure it.

     

     

    In my scenraio, i have got 2 landing uri's configured ,"Actividentity" and "Swivelsecure".

     

     

    Now windows doesn't allow you have any special characters in the filename so i can't name a file "SwivelSecure/right.inc".

     

     

    So it will be great if you could provide some more insight on the issue.

     

     

    Thanks a lot for your assistance in advance

     

     

    Avik
  • mal_57091's avatar
    mal_57091
    Icon for Nimbostratus rankNimbostratus
    Feb 10, 2009
    Hey Avik,

     

     

    Umm..no..i believe in the sandbox you need to create a directory called SwivelSecure and then in that directory place the right.inc file. Just be careful because FirePass is case sensitive so if the landing URI is actually configured as SwivelSecure in the admin GUI then the folder would also need to be SwivelSecure (same case configuration).

     

     

    Then just use your normal WebDav client to connect to the sandbox as per normal and just copy in the files you need to the SwivelSecure directory. This should be pretty straightforward from that point one.

     

     

    Good luck!

     

     

    Cheers,

     

    Mal
  • avik_bose_1048's avatar
    avik_bose_1048
    Icon for Nimbostratus rankNimbostratus
    Feb 10, 2009
    Hi Mal,

     

    It works !!! I created a subdirectory under sandbox by the name swivelsecure and placed the right.inc file under that directory and now i get the turing image only when i go to https://firepassip/swivelsecure/

     

     

    Thanks again for ur help.

     

     

    Avik