Problem with IPAddress Authentication Handler for shibboleth idp

[Cantor, Scott]

On 4/8/13 7:52 PM, "Jing Xiao" <jing at springshare.com> wrote:

>i am following
>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthIP to setup
>ip based authentication.
>
>first, it looks like the it should add ph name space like
>
><ph:LoginHandler xsi:type="IPAddress" username="ip-user"
>defaultDeny="true">
><ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:InternetPr
>otocol</ph:AuthenticationMethod>
>          <ph:IPEntry>192.168.0.0/16</ph:IPEntry>
></ph:LoginHandler>

If your default namespace isn't the one bound to the ph prefix, then
that's not going to work, you have to use ph:IPAddress.

>Is it a bug?

No, it's an error in your file.

-- Scott