JAAS / Client IP ?

Cantor, Scott cantor.2 at osu.edu
Tue Aug 18 11:47:52 EDT 2015


On 8/18/15, 11:05 AM, "dev on behalf of James Drews" <dev-bounces at shibboleth.net on behalf of james.drews at wisc.edu> wrote:

>We have written a JAAS plugin for the Shib v2/v3 IDP, and all works just fine.  But now my security group is requesting that I also track the client IP of the requests (something about running reports of accounts that authenticate form multiple countries in a short time period to locate compromised accounts).
> 
>How do I go about getting the IP Address of the requesting client down in my JAAS plugin?

I don't believe you can, not without IdP code changes anyway.

Why not just use the IdP logs for this?

-- Scott



More information about the dev mailing list