session tagging in shibboleth-sp - can it support network block tagging?

Cantor, Scott cantor.2 at osu.edu
Fri Dec 1 15:05:29 EST 2017


> Does it currently support session tagging using information about the client's
> network connection other than the source client IP as currently used in
> consistent IP check in 2.5.3?

No.

> If session tagging is still a feature in 2.6.3

There is no such version, the last one is 2.6.1.

> If not is there an
> extension point in shibboleth-sp that would allow us to replace the
> consistent IP check (or current session tagging if it doesn't support a network
> block) with one that supports a consistent network block?

Not an explicit extension point, no, the entire session manager would be an overbroad place to try and inject that.
 
-- Scott



More information about the users mailing list