IDP v3 consistentAddress with netmask ?

[Jarno Huuskonen]

Hi,

Just an idea: Would it possible to have idp.session.consistentAddress=true
but with netmask ?

What I mean is having a configuration something like this:
  p:consistentRanges="#{ {
	'10.139.0.0/19', '192.168.0.0/16',
	'2001:708:x:y::/64' } }" />

--> clients address should be considered consistent if it matches
a network/mask. (With defaults /32 and /128 (should match current impl.))

for example client with lan: 10.139.5.155 and wlan: 10.139.30.222
-> both addresses match 10.139.0.0/19 -> consistent address.

This would allow clients to move for example from lan -> wlan without
forcing them to reauthenticate and have more control than just disabling
consistentAddress(idp.session.consistentAddress=false).

Does this sound feasible ?

-Jarno

-- 
Jarno Huuskonen