Forum Discussion
Webtop links auto published
Here's sort of how that goes:
- The resource and its associated customization are created via Web GUI or some other way
- The resource and customization are associated with the access policy
- The access policy snapshot with that information is created (this is what happens when you do "apply access policy")
- The resource and full webtop are assigned to the user's session by the access policy.
- Full webtop shows up and loads the resources and their customization.
So, depending on your requirements you have a few options. Here are some important points:
- You can't dynamically create resources at run-time because the objects must first exist in the snapshot.
- You can customize the webtop's HTML and JS as much as you like using Advanced Customization.
- You cannot dynamically execute server-side code in the full webtop because it's cached as a static file. You'll notice that there is some PHP in there, but that is only executed ONCE. Thereafter, it's cached.
- You CAN include client-side javascript in the webtop.
- The APM renderer (http server that sends pages to end-users) does do real-time substitution of session variables. For example, %{session.logon.last.username} becomes the user's username. You can use any built-in session variable or any you've created in this way.
So generally if I had to create a solution like this, I'd do some LDAP/AD queries and do some %{xxxxx} session variable substitution, then read that in with a clientside js function and render it in whatever way is appropriate. This would be complicated front-end web development, but not particularly abnormal.
- kevin_flynn_180Nov 22, 2016Nimbostratus
Lucas, Thanks. I was thinking that a solution revolving around 5 would work, just needs some imagination.
Forgetting everything else going on... we are working to deploy servers in a rapid manner (openstack) for customers. Logging into a portal, they would get a webtop where they can click on the servers they own, and connect.
Obviously this can change dynamically and thus some of my questions. Even if we publish a xml file twice a day that gets read in and deployed, I'd be happy. Of course, doing an AD lookup with associated server objects is better.
User logs in, ad lookup, has x,y,z objects associated, creates x,y,z on webtop...
- Lucas_Thompson_Nov 22, 2016Historic F5 Account
What sort of access are you providing with the webtop? Is it reverse proxy, apptunnel, VPN, or ?
You could always have the process that does the deployment auto-create the resources+customization via TMSH in BIG-IP, and then do "apply access policy" (the tmsh command for that is available too).
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com