Detection of replay attack in clustered environment

[KajoKrtko]

Hi,

Is it a good idea to detect replay attack by collecting assertion id and
comparing them? In clustered environment. I'd collect it in our database and
compare with incoming assertions.

Our environment is:
- BigIP loadbalancer and SSL handler
- 10 servers each including Apache and Tomcat. And shibboleth module now.

- I don't want to have all login activity on one server (aka shared shibd
process running on one machine)
- I'll catch and collect assertion ids as described here :
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAssertionExport
- it is configured and working.
- https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPClustering
would not work in our environment because I can't use shared net and Shared
DB plugin is beta.

Thanks
Kajo



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Detection-of-replay-attack-in-clustered-environment-tp7594992.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.