APM Cookbook: Modify LDAP Attribute Values using iRulesLX

Introduction Access Policy Manager (APM) does not have the ability to modify LDAP attribute values using the native features of the product. In the past I’ve used some creative unsupported solutio...
Published Sep 27, 2016
Version 1.0
BIG-IP Access Policy Manager (APM)
cookbook
iRulesLX
security
Mac's avatar
Mac
Icon for Nimbostratus rankNimbostratus
Mar 14, 2022

I am using this to modify AD.  Everything works until there is a "comma" in the CN portion of the Distinguished Name.  Has anyone encountered this issue?   Any suggesitons on a fix?

 

Works

cn=doe jon, ou=example, dc=com

Fails

cn=doe, jon, ou=example, dc=com

 

 

 

SOLVED.

Added the following escape procedure

proc FixDN dn {
return [regsub -all {\\\,} $dn {\\,}]
}