For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

umiotoko_95283's avatar
umiotoko_95283
Icon for Nimbostratus rankNimbostratus
Sep 21, 2011

X-Authenticated-User field

Probably a stooopid question, but I can't seem to find detailed documentation on this.       I host a SSL website that our users have to log into, through APM with a LDAP call to AD. Wit...
application delivery
dev
devops
iRules
Brian_Deitch_11's avatar
Brian_Deitch_11
Historic F5 Account
Sep 21, 2011
1. I don't think so. You should do this within your irule.

2. You will have duplicates.

Try this: 

when ACCESS_ACL_ALLOWED {
  if { [HTTP::header exists X-Authenticated-User] {
      HTTP:header remove X-Authnticated-User
    HTTP::header insert "X-Authenticated-User"  [ACCESS::session data get session.logon.last.username ]
}