[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources/conf: access-control.xml authn/ipaddress-authn-...

[noreply at shibboleth.net]

Author: scantor
Date: Fri Nov 14 18:57:47 2014
New Revision: 6900

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6900&view=rev
Log:
Add a clarifying comment.

Modified:
    trunk/idp-conf/src/main/resources/conf/access-control.xml
    trunk/idp-conf/src/main/resources/conf/authn/ipaddress-authn-config.xml

Modified: trunk/idp-conf/src/main/resources/conf/access-control.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/access-control.xml?rev=6900&r1=6899&r2=6900&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/access-control.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/access-control.xml Fri Nov 14 18:57:47 2014
@@ -20,6 +20,12 @@
 
     <!-- Map of access control policies used to limit access to administrative functions. -->
 
+    <!--
+    The only built-in implementation of the AccessControl interface is IP-based, as below.
+    The ranges provided MUST be CIDR network expressions. To specify a single address,
+    add "/32" or "/128" for IPv4 or IPv6 respectively.
+    -->
+
     <util:map id="shibboleth.AccessControlPolicies">
     
         <entry key="AccessByIPAddress">

Modified: trunk/idp-conf/src/main/resources/conf/authn/ipaddress-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/ipaddress-authn-config.xml?rev=6900&r1=6899&r2=6900&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/ipaddress-authn-config.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/authn/ipaddress-authn-config.xml Fri Nov 14 18:57:47 2014
@@ -13,7 +13,12 @@
     <!-- Apply any regular expression replacement pairs to address before validation. -->
     <util:list id="shibboleth.authn.IPAddress.Transforms" />
 
-    <!-- Configure the address range(s) and principal name(s) for IP-based login here. -->
+    <!--
+    Configure the address range(s) and principal name(s) for IP-based login here.
+    The ranges provided MUST be CIDR network expressions. To specify a single address,
+    add "/32" or "/128" for IPv4 or IPv6 respectively.
+    -->
+
 
     <util:map id="shibboleth.authn.IPAddress.Mappings">
         <!--