two apache instances using one shibd process possible?

[Cantor, Scott]

On 2/26/13 11:23 PM, "Gernot Hassenpflug"
<gernot.hassenpflug at asahinet.com> wrote:

>The problem was finally resolved. The culprit was that since we had 2
>apache instances (on the same physical server) with different IP
>addresses (127.0.0.1 and 127.0.0.2), we needed set
>consistentAddress=false in the Sessions element.

Sorry, didn't see this until today. You very likely do NOT want to do
that, that makes your sessions totally vulnerable if they're stolen.

You don't need to turn that off, just get the proxy to forward the IP
address of the real client and set REMOTE_ADDR in the SP to the header to
read it from.

-- Scott