Forum Discussion
jban_198207
Cirrus
Cirrusv11.6 Pulate session var from Principal Name
Hi,
Does anyone have correct Custom Expression or iRule for populating session.logon.last.username and session.logon.last.domain from Subject Alternate Name : Principal Name
Example: … X509v3 Subject Alternative Name: othername:UPN
… For Cert we are using Client Certificate Inspection no On-Demand.
F5 version 11.6
2 Replies
Hi jban, does the information on page 49-50 of this guide help: http://www.f5.com/pdf/deployment-guides/iapp-sharepoint-2010-2013-dg.pdf
thanks
Mike
jban_198207Hi,
Looks good. We create it this way: session.logon.last.upn = regexp {(?x)(UPN)<([^,]+)(?=>)} [mcget {session.ssl.cert.x509extension}] match UPN USER; return $USER
