Suggestions to handle IP Mismatch Issues

[ragadeep]

Hello,

We are noticing an increasing number of session removals due to a network change at client's location where the user's IP address is changing mid session. We end up with IP address mismatch and the session gets removed. Following are 2 threads that I thought captured a lot of the detail surrounding this issue

http://shibboleth.1660669.n2.nabble.com/IP-address-mismatch-issues-td7586969.html
http://shibboleth.1660669.n2.nabble.com/Shibboleth-library-shutting-down-several-times-per-day-td7591326.html#a7591331

Following is an excerpt from the second link above

*****************************************************************************
>How does this interact with a wireless connection that roams between

>multiple access points and may actually change the workstation IP address?


It makes cookie-based security pretty much a joke. There's nothing I can

do to fix that. My personal opinion is that that's a bad thing to change

the address, but if that's what you do, then you can either rely on SSO to

rollover the session silently, or turn off your address checks.


-- Scott

*****************************************************************************

1. Wanted to find how others are handling these issues? 
2. Is it possible to rollover the session silently in Shib-SP? 

Thanks
Ragadeep


 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131211/d70bde50/attachment-0001.html