f5-appsvcs-extension icon indicating copy to clipboard operation
f5-appsvcs-extension copied to clipboard

Not able to declare adfs_proxy profile

Open ov33 opened this issue 2 years ago • 2 comments

Issue Description:

Problem: I'm facing a challenge with configuring the adfs_proxy profile for an LTM virtual server (<VS-name>) using tmsh. The issue is that whenever changes are made to the virtual server that requires this profile, it gets unchecked during the declaration.

Desired Solution: I suggest two possible solutions:

  1. Modify the behavior of the virtual server to ignore the adfs_proxy profile.
  2. Provide a way to explicitly declare the adfs_proxy profile and retain its configuration.

Additional Information: The adfs_proxy profile requires establishing trust with the ADFS that you proxy. Here's the workaround we're currently using:

  • We've set up a "fake" virtual server in /Common/ with an established trust.
  • We assign the trust server certificate to the declaration we want.
  • With every change, we have to manually recheck the adfs_proxy profile in the GUI, which is not ideal.

This issue is causing inefficiencies in our workflow, and we're looking for a more streamlined solution to manage the adfs_proxy profile.

Environment:

  • TMOS Version: 17.1.3

F5 source: https://my.f5.com/manage/s/article/K81345433

ov33 avatar Oct 31 '23 06:10 ov33