Advice on controlling IDP 3 administrative functions
Peter Schober
peter.schober at univie.ac.at
Sun Apr 19 08:25:26 EDT 2015
* Koch, Ken <ken at wustl.edu> [2015-04-17 20:19]:
> One of the monitors on the IDP is /idp/profile/status and I've
> whitelisted the internal IP addresses of the F5's in the IDP Access
> Control. The downside is that any request flowing through the load
> balancers takes on that internal IP and such can access my
> administrative function pages.
>
> My options as I see them:
Your first and best option is to fix the setup so you're seeing the
actual remote IP address instead of that of the proxy (load balancer).
That will also make your access/audit logs usable.
-peter
More information about the users
mailing list