[java-idp-testbed COMMIT] in /trunk/src/main/resources: conf/idp.properties flows/authn/ipaddress-authn-beans.xml

noreply at shibboleth.net noreply at shibboleth.net
Thu Oct 17 11:30:09 EDT 2013


Author: scantor
Date: Thu Oct 17 11:30:09 2013
New Revision: 14

URL: http://svn.shibboleth.net/view/java-idp-testbed?rev=14&view=rev
Log:
Improve address-based login config.

Modified:
    trunk/src/main/resources/conf/idp.properties
    trunk/src/main/resources/flows/authn/ipaddress-authn-beans.xml

Modified: trunk/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/conf/idp.properties?rev=14&r1=13&r2=14&view=diff
==============================================================================
--- trunk/src/main/resources/conf/idp.properties (original)
+++ trunk/src/main/resources/conf/idp.properties Thu Oct 17 11:30:09 2013
@@ -29,7 +29,7 @@
 idp.session.secondaryServiceIndex = false
 
 # Regular expression expressing flows to enable 
-idp.authn.flows = JAASForm
+idp.authn.flows = IPAddress
 
 # Default lifetime and timeout of various authentication methods
 idp.authn.defaultLifetime = PT60M

Modified: trunk/src/main/resources/flows/authn/ipaddress-authn-beans.xml
URL: http://svn.shibboleth.net/view/java-idp-testbed/trunk/src/main/resources/flows/authn/ipaddress-authn-beans.xml?rev=14&r1=13&r2=14&view=diff
==============================================================================
--- trunk/src/main/resources/flows/authn/ipaddress-authn-beans.xml (original)
+++ trunk/src/main/resources/flows/authn/ipaddress-authn-beans.xml Thu Oct 17 11:30:09 2013
@@ -17,19 +17,17 @@
     <bean id="ExtractUserAgentAddress" class="net.shibboleth.idp.authn.impl.ExtractUserAgentAddress" scope="prototype"
         p:httpServletRequest-ref="shibboleth.HttpServletRequest" />
         
-    <bean id="ValidateUserAgentAddress" class="net.shibboleth.idp.authn.impl.ValidateUserAgentAddress" scope="prototype"
-            p:principalName="jdoe">
-        <property name="designatedRanges">
-            <list>
-                <value>127.0.0.1/32</value>
-            </list>
+    <bean id="ValidateUserAgentAddress" class="net.shibboleth.idp.authn.impl.ValidateUserAgentAddress" scope="prototype">
+        <property name="mappings">
+            <map>
+                <entry key="jdoe">
+                    <list>
+                        <value>127.0.0.1/32</value>
+                        <value>::1/128</value>
+                    </list>
+                </entry>
+            </map>
         </property>
     </bean>
 
-    <!--
-    You can add additional ValidateUserAgentAddress bean definitions if you want to map
-    different ranges to different users. Just give the bean(s) different ids and wire them
-    in sequence into the ipaddress-authn-flow.xml file.
-    -->
-
 </beans>



More information about the commits mailing list