IDP v3.1.0 idp.session.consistentAddress

[Koch, Ken]

Greetings list. I'm testing clustering HA with a few IDP nodes behind some BIGIP LTMs.

When I set the idp.properties files to "idp.session.consistentAddress = false" I can no longer login to the IDPs. I'm setting this property to false because the LB's using SNAT automap to my nodes randomly pick from a pool of internet IP addresses on the subnet. I have the option of setting a dedicated SNAT Address on the LB configuration, but I'd rather tell the IDP to ignore the IPs for session state if possible.

Login UI error:
net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Address cannot be null or empty

idp-process.log:
2015-03-17 13:56:34,727 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Address cannot be null or empty
                at net.shibboleth.utilities.java.support.logic.Constraint.isNotNull(Constraint.java:227)


Thoughts?

-Ken

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150317/23e93031/attachment.html