SP and mixed IPv6/IPv4 addresses

Tom Poage tfpoage at ucdavis.edu
Mon Aug 11 16:24:20 EDT 2014


Interesting case brought to my attention.

Institution uses both IPv6 and IPv4. Internal client (multiple
interfaces) authenticates against IdP via IPv6, but external
communication (to remote SP) is via IPv4. Triggers checkAddress error.
Not quite the proxy scenario in the error message.

Certainly, checkAddress can be set false, but I also wonder whether
we'll start to see this kind of error more often as the world continues
to adopt IPv6.

Tom.


More information about the users mailing list