APM Pre-Authentication in front of Google Authenticator Generation iRule

Forums Technical Forums
, ,
1

Hi everyone,

i’m trying to configure pre-authentication in front of the google authenticator-generation rule. I’ve used following articel, and everything is working fine from the google auth. side of view.

devcentral.f5.com/articles/two-factor-authentication-with-google-authenticator-and-apm

The Part where i want to put pre-authentication (Logon Page with AD Auth) in front is following:

I’ve tried several things already:

  • iRule event and “when ACCESS_POLICY_AGENT_EVENT” in hte Rule
  • VS with irule attached and member of a pool - new VS for APM pre auth and as a resource the google generation pool (-> not working because of limitation, there is an SOL articel about that)

What i get in the log is this everytime APM is in front:

May 19 11:44:20 Snorre err tmm3[3992]: 011f0007:3: http_process_state_prepend - Invalid action:0x1090b1 (Client side: vip=/Testpartition/google_auth_preauth profile=http addr=10.10.10.1 port=443 rtdom_id=0 client_ip=10.1.1.25)

Any suggestions?

Many thanks, Mike

2

Mike,

Check your iRule again. It looks like you have an error but there is not enough log data to determine the full issue.

3

fixed it by changing HTTP::respond to ACCESS::respond → now everything is working like expected.