How to check whether IdP is functioning properly

Daniel Hutchison daniel.hutchison at uvu.edu
Fri Mar 4 13:10:45 EST 2016


On Fri, 2016-03-04 at 18:49 +0100, Sander Maijers wrote:

> ... Based on section 6.11 of
> https://www.switch.ch/aai/guides/idp/installation/#shibbolethidp and
> my failed tests of various paths, including the one mentioned by
> Daniel, it seemed that the status handler endpoint was no longer
> available by default. But apparently that's not the case. Would you be
> so kind to point me to the official IdP V3 documentation about the
> status handler/monitoring of IdP availability? 


When you sent your message, I checked my v3 clean install of the IDP and
noticed I was getting an access denied from the status page.  It appears
I had missed configuring the access to the status page.  If you are
seeing an access denied error, you might want to check the following
files:


        idp.properties
        
                idp.status.accessPolicy= AccessByIPAddress
                
        
        access-control.xml
        
                <entry key="AccessByIPAddress">
                            <bean parent="shibboleth.IPRangeAccessControl"
                                p:allowedRanges="#{ {'127.0.0.1/32', '::1/128'} }" />
                </entry>
                

-daniel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160304/22085f09/attachment.html>


More information about the users mailing list