Bug ID 481210: Active Directory Query doesn't populate all values of multi-value attributes

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3

Fixed In:
12.0.0, 11.6.0 HF4

Opened: Sep 25, 2014
Severity: 3-Major
Related AskF5 Article:
K16426

Symptoms

If some attribute requested by Active Directory (AD) Query contains multiple values (for example, memberOf), then the last value is omitted in the corresponding session variable.

Impact

Access policy may make wrong decision based on session variables registered by AD Query.

Conditions

Active Directory attribute has multiple values.

Workaround

None

Fix Information

All values are now populated as session variables as expected.

Behavior Change