Forum Discussion
Stanislas_Piro2
Aug 03, 2017Cumulonimbus
Hi,
I think you are trying to do complicated configuration for something quite simple.
you can :
- use Advanced ressource assign to assign resources based on the username
- use generic RDP with host value RDP_%{session.logon.last.username} if user E72074 have to connect to hostname is RDP_E72074 (you can also create a DNS CNAME in internal AD to do that)
- use an irule to assign resources
This irule uses a Data Group named user_resources_DG with value format: (with curly brakets)
{{resources Portal Access} {resources Application Tunnel} {resources Network Access} {resources RDP}}
when ACCESS_POLICY_COMPLETED {
if {[ACCESS::policy result] equals "allow" && [class match [string tolower [ACCESS::session data get session.logon.last.username]] equals user_resources_DG]} {
set resources [class match -value [string tolower [ACCESS::session data get session.logon.last.username]] equals user_resources_DG]
ACCESS::session data set session.assigned.resources.pa [lindex $resources 0]
ACCESS::session data set session.assigned.resources.at [lindex $resources 1]
ACCESS::session data set session.assigned.resources.na [lindex $resources 2]
ACCESS::session data set session.assigned.resources.rd [lindex $resources 3]
}
}