Forum Discussion

MHMHMH's avatar
MHMHMH
Icon for Nimbostratus rankNimbostratus
May 19, 2016

APM Pre-Authentication in front of Google Authenticator Generation iRule

Hi everyone,

i'm trying to configure pre-authentication in front of the google authenticator-generation rule. I've used following articel, and everything is working fine from the google auth. side of view.

devcentral.f5.com/articles/two-factor-authentication-with-google-authenticator-and-apm

The Part where i want to put pre-authentication (Logon Page with AD Auth) in front is following:

https://devcentral.f5.com/codeshare?sid=532

I've tried several things already:

  • iRule event and "when ACCESS_POLICY_AGENT_EVENT" in hte Rule
  • VS with irule attached and member of a pool - new VS for APM pre auth and as a resource the google generation pool (-> not working because of limitation, there is an SOL articel about that)

What i get in the log is this everytime APM is in front:

May 19 11:44:20 Snorre err tmm3[3992]: 011f0007:3: http_process_state_prepend - Invalid action:0x1090b1 (Client side: vip=/Testpartition/google_auth_preauth profile=http addr=10.10.10.1 port=443 rtdom_id=0 client_ip=10.1.1.25)

Any suggestions?

Many thanks, Mike

  • Cody_Green_1030's avatar
    Cody_Green_1030
    Historic F5 Account

    Mike,

     

    Check your iRule again. It looks like you have an error but there is not enough log data to determine the full issue.

     

    • MHMHMH's avatar
      MHMHMH
      Icon for Nimbostratus rankNimbostratus
      fixed it by changing HTTP::respond to ACCESS::respond -> now everything is working like expected.