Forum Discussion
Nikolay_Matveev
Jun 03, 2016Nimbostratus
If I understood correctly the author of the question said that he wanted to make a load balancing decision based on AD group membership of the connecting computer and do so on CLIENT_ACCEPTED which happens before the APM policy is invoked...
If low performance is not a big issue for the author then, I guess, he could find out computer name via [RESOLV::lookup] and then run a sideband AD/LDAP query using this name and ACCESS::policy evaluate. It seems possible...
The obvious pre-requisites would be the presence of DNS PTR-records for connecting computers and APM module licensed on the BigIP box.