How to check whether IdP is functioning properly
Daniel Hutchison
daniel.hutchison at uvu.edu
Fri Mar 4 13:10:45 EST 2016
On Fri, 2016-03-04 at 18:49 +0100, Sander Maijers wrote:
> ... Based on section 6.11 of
> https://www.switch.ch/aai/guides/idp/installation/#shibbolethidp and
> my failed tests of various paths, including the one mentioned by
> Daniel, it seemed that the status handler endpoint was no longer
> available by default. But apparently that's not the case. Would you be
> so kind to point me to the official IdP V3 documentation about the
> status handler/monitoring of IdP availability?
When you sent your message, I checked my v3 clean install of the IDP and
noticed I was getting an access denied from the status page. It appears
I had missed configuring the access to the status page. If you are
seeing an access denied error, you might want to check the following
files:
idp.properties
idp.status.accessPolicy= AccessByIPAddress
access-control.xml
<entry key="AccessByIPAddress">
<bean parent="shibboleth.IPRangeAccessControl"
p:allowedRanges="#{ {'127.0.0.1/32', '::1/128'} }" />
</entry>
-daniel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160304/22085f09/attachment.html>
More information about the users
mailing list