Problem with client ip address changing

Peter Schober peter.schober at
Tue Nov 13 10:30:57 EST 2012


* Viitanen Viljo <viljo.v.viitanen at> [2012-11-13 15:16]:
> The current behavior is unacceptable, as the various SP's don't
> quite know what to do with a situation where they get a successful
> login without any attributes they need. I'd rather the idp to issue
> an error to the user, and not let the user proceed to SP.

Promoting updating these SP to Shib 2.5 might be a way forward, to
protect against this at the SP side. Cf. "Attribute checking" (first item):

More information about the users mailing list