IDP v3.1.0 idp.session.consistentAddress

[Cantor, Scott]

On 3/17/15, 7:22 PM, "Koch, Ken" <ken at wustl.edu> wrote:


>
> 
>When I set the idp.properties files to
>“idp.session.consistentAddress = false” I can no longer login to the 
>IDPs. I’m setting this property to false because the LB’s using SNAT 
>automap to my nodes randomly pick from a pool of internet IP addresses on 
>the subnet. I have the option of setting a dedicated SNAT Address on the 
>LB configuration, but I’d rather tell the IDP to ignore the IPs for 
>session state if possible.

Telling it to ignore the address doesn't actually change the requirement 
that it be there. It just doesn't use it for enforcement.

-- Scott