IP Based Activation Condition

[Kevin Ratcliffe]

Hi

I have our IdP v3 up and running with SPNEGO, but now I need to get my activation condition working so that users within college don't need to sign in and external users are forced to use the username/password login page.

I am using the IP based activation condition from the wiki but I suspect that it isn't detecting the end users IP as I would expect.

If I use the following as the activation condition:

if (custom.remoteAddr.startsWith("10.52."))

SPNEGO fails to happen even though my IP is 10.52.10.52.

yet it works with:

if (custom.remoteAddr.startsWith("10."))

Could it be picking up the IP of the reverse proxy which sits in front of our IdP?

Any help would be great, thanks in advance.

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.