IDP v3.1.0 idp.session.consistentAddress

[Koch, Ken]

When I set "idp.session.consistentAddress" = true or comment out the line to take the defaults, things work great but I can't hop between nodes for testing because I get IP address session consistency errors in the logs. 

When I set it to false, I enter my credentials and then get the error page. I've made no other changes. 


-Ken

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, March 17, 2015 2:54 PM
To: Shib Users
Subject: Re: IDP v3.1.0 idp.session.consistentAddress

On 3/17/15, 7:51 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:


>
>Telling it to ignore the address doesn't actually change the 
>requirement that it be there. It just doesn't use it for enforcement.

(Unless of course getRemoteUser() is still returning *something* to the servlet layer, in which case this is a bug.)

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net