v11.6 Pulate session var from Principal Name

Question

Hi,&nbsp;
Does anyone have correct Custom Expression or iRule for populating session.logon.last.username and session.logon.last.domain from Subject Alternate Name : Principal Name&nbsp;
Example:
…
X509v3 Subject Alternative Name:          othername:UPN &nbsp;
…
For Cert we are using Client Certificate Inspection no On-Demand. &nbsp;
F5 version 11.6&nbsp;

mikeshimkus_111 · Answer

Hi jban, does the information on page 49-50 of this guide help:  http://www.f5.com/pdf/deployment-guides/iapp-sharepoint-2010-2013-dg.pdf&nbsp;
thanks&nbsp;
Mike&nbsp;

jban_198207 · Answer

Hi,&nbsp;
Looks good. 
We create it this way:
 session.logon.last.upn = regexp {(?x)(UPN)&lt;([^,]+)(?=&gt;)} [mcget {session.ssl.cert.x509extension}] match UPN USER; return $USER&nbsp;

Forum Discussion

v11.6 Pulate session var from Principal Name

2 Replies

Recent Discussions

Error while running ansible

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Related Content

Ending an APM session when browser tab is closed

TLS Stateful vs Stateless Session Resumption

Agility sessions announced

source address persistence maximum session timeout

Sessions, Sessions Everywhere