v3 Status Handler CIDR ACL

[Nate Klingenstein]

Does that address mask work now? Is that supposed to mean any address?

I'm able to use 0.0.0.0/0 in other environments like AWS for "any IP".  I think it's legal.

Interestingly, it looks like jetty is listening on a different local address when I start it using the jetty-base that is distributed than with jetty's own distributed start.ini.  Maybe IPv6 only?

[root at idp-load-1 jetty-base]# netstat -pant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      1146/sshd
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      1179/sendmail
tcp        0      0 10.16.142.228:41844         54.244.88.132:4505          ESTABLISHED 1213/python
tcp        0    288 10.16.142.228:22            97.122.121.81:51009         ESTABLISHED 4403/sshd
tcp        0      0 10.16.142.228:22            97.122.121.81:57256         ESTABLISHED 6224/sshd
tcp        0      0 ::ffff:127.0.0.1:9443       :::*                        LISTEN      6961/java
tcp        0      0 :::22                       :::*                        LISTEN      1146/sshd
tcp        0      0 ::ffff:127.0.0.1:8443       :::*                        LISTEN      6961/java
[root at idp-load-1 jetty-base]# netstat -pant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      1146/sshd
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      1179/sendmail
tcp        0      0 10.16.142.228:41844         54.244.88.132:4505          ESTABLISHED 1213/python
tcp        0      0 10.16.142.228:22            97.122.121.81:57347         ESTABLISHED 7082/sshd
tcp        0    288 10.16.142.228:22            97.122.121.81:51009         ESTABLISHED 4403/sshd
tcp        0      0 10.16.142.228:22            97.122.121.81:57256         ESTABLISHED 6224/sshd
tcp        0      0 :::8080                     :::*                        LISTEN      7155/java
tcp        0      0 :::22                       :::*                        LISTEN      1146/sshd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140701/90248d29/attachment.html