IDP v3 consistentAddress with netmask ?

[Cantor, Scott]

On 3/18/15, 11:19 AM, "Jarno Huuskonen" <jarno.huuskonen at uef.fi> wrote:

>Hi,
>
>Just an idea: Would it possible to have idp.session.consistentAddress=true
>but with netmask ?
>
>What I mean is having a configuration something like this:
>  p:consistentRanges="#{ {
>	'10.139.0.0/19', '192.168.0.0/16',
>	'2001:708:x:y::/64' } }" />
>
>--> clients address should be considered consistent if it matches
>a network/mask. (With defaults /32 and /128 (should match current impl.))
>
>for example client with lan: 10.139.5.155 and wlan: 10.139.30.222
>-> both addresses match 10.139.0.0/19 -> consistent address.

It sounds a little complicated. I think you're suggesting that instead of comparing a bound address to the client address, the bound address is compared to a set of netmasks, and as soon as a match is found, the client address is compared to the same mask and if it matches, then the two are treated as matching.

I guess that works, but I wouldn't implement it that one way. I'd just make the comparison step a pluggable Predicate and I'd leave it up to that.

>Does this sound feasible ?

Probably.

-- Scott