Forum Discussion

Nfordhk_66801's avatar
Nfordhk_66801
Icon for Nimbostratus rankNimbostratus
Feb 19, 2015

Using APM to secure VS by machine name

Hi,   We are attempting to meet compliance standards and determine a way to secure access to our Virtual Servers. Short of ACLs due to our IP design based on geographic rather than departments in ...
APM
application delivery
design
LTM
security
Nfordhk_66801's avatar
Nfordhk_66801
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

Ahh, the command lines show a lot more info

 0e9eba9c.session.windows_info_os.last.computer 167 |testserver2|testserver2|ourdomain.com|testserver2.ourdomain.com|testserver2|testserver2|ourdomain.com|testserver2.ourdomain.com|

I did change the search string to where this server is located.

  • Nfordhk_66801's avatar
    Nfordhk_66801
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2015
    Are these fields suppose to be blank? d4f2c301.session.ad./Common/pra-poc-f5-forum_act_active_directory_query_ag.errmsg 40 no matching user found with filter name= d4f2c301.session.ad./Common/pra-poc-f5-forum_act_active_directory_query_ag.queryresult 1 0 d4f2c301.session.ad.last.errmsg 40 no matching user found with filter name=
  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Feb 23, 2015
    Nope... since we are getting the session.windows_info_os.last.computer variable the iRule should parse the array and create the session.custom.computer variable that the VPE can use in the ADQuery. Does your iRule appear to be firing now? You can add a log statement to the iRule and see if we are getting to the right place. If you can validate that we will move on to the next step which would be your AD Query action. -Seth
  • Nfordhk_66801's avatar
    Nfordhk_66801
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2015
    I dont think the irule is even being utilized. Commented more info below