two apache instances using one shibd process possible?

Cantor, Scott cantor.2 at
Thu Feb 28 13:42:18 EST 2013

On 2/26/13 11:23 PM, "Gernot Hassenpflug"
<gernot.hassenpflug at> wrote:

>The problem was finally resolved. The culprit was that since we had 2
>apache instances (on the same physical server) with different IP
>addresses ( and, we needed set
>consistentAddress=false in the Sessions element.

Sorry, didn't see this until today. You very likely do NOT want to do
that, that makes your sessions totally vulnerable if they're stolen.

You don't need to turn that off, just get the proxy to forward the IP
address of the real client and set REMOTE_ADDR in the SP to the header to
read it from.

-- Scott

More information about the users mailing list