For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Charles_Terry_1's avatar
Charles_Terry_1
Icon for Nimbostratus rankNimbostratus
Aug 22, 2006

Using LDAP Variables with Terminal Server Favorites

I've been evaluating the 4100 unit at our company for the last few weeks and the following request has been made since it was supposedly shown in a demo.

 

 

We want our remote users to authenticate to the firepass and then either using a terminal server favorite or some sort of network access favorite, create an icon automatically that has the user's internal workstation information retrieved from ldap authentication and tie that into microsoft's remote desktop connection program. I'm told it can be done in the 6.x version of the software. I'm supposed to be able to use session variables for the host field in terminal server for example but I can't get that to work. Anyone tried doing the same thing or very close to this and made it work? Help!!!
BIG-IP Access Policy Manager (APM)
remote access
security

4 Replies

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Sep 11, 2006
    I've not set up a configuration exactly like the one you're describing, but you should definitely be able to use the variables you're speaking of to help accomplish such a task.

     

     

    If you describe a little more about what you're doing to try and accomplish thi s as well as the problems you're running into, we might be able to add some more insight.

     

     

    Thanks,

     

    Colin
  • Charles_Terry_1's avatar
    Charles_Terry_1
    Icon for Nimbostratus rankNimbostratus
    Sep 14, 2006
    Basically what we wanted to do in our evaluation was:

     

     

    1. Have a user login and based on the ldap authentication information passed back to the firepass use one or more session variables to "autocreate" a terminal server favorite icon for example.

     

     

    2. This icon would coorespond to the users internal company workstation.

     

     

    Problem: I never could get any of the terminal server favorite fields or switches to recognize a session variable.

     

     

    Question: Is that information only used in say prelogin inspectors or rules?
  • vbrijlal_95918's avatar
    vbrijlal_95918
    Icon for Nimbostratus rankNimbostratus
    Mar 05, 2007
    Hi cterry,

     

     

    Did you get any resolutions to this?

     

     

    Thanks

     

     

     

    Posted By cterry on 09/14/2006 1:27 PM

     

    Basically what we wanted to do in our evaluation was:

     

    1. Have a user login and based on the ldap authentication information passed back to the firepass use one or more session variables to "autocreate" a terminal server favorite icon for example.

     

    2. This icon would coorespond to the users internal company workstation.

     

    Problem: I never could get any of the terminal server favorite fields or switches to recognize a session variable.

     

    Question: Is that information only used in say prelogin inspectors or rules?

     

     

  • psilvas's avatar
    psilvas
    Icon for Altostratus rankAltostratus
    Mar 05, 2007
    The functionality you desire will be in the 6.01 release - targeted for today (03.05.07) After upgrading to 6.01, favorite Name, host, port, Select a program and Working Directory all support session variables.