Enable IdP Status in IdP 3.3.x

[Klingenstein, Nate]

Lalith,


The only consistent way to know which IP address is being used to communicate with your IdP is to check your web server's access logs to see which IP address it thinks your queries are coming in from.  That IP will work if you configure it in.


Take care,

Nate.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Lalith Jayaweera <ljayaweera at gmail.com>
Sent: Thursday, July 27, 2017 4:53:20 PM
To: Shib Users
Subject: Enable IdP Status in IdP 3.3.x

I wanted to enable  idp status (https://<idphost>/idp/status) for a specific IP

I modified  access-control.xml and added

  <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"
                p:allowedRanges="#{ {'xxx.xxx.x.xxx/32', '::1/128'} }" />

also in idp.properties I got below

idp.status.accessPolicy= AccessByIPAddress
idp.resolvertest.accessPolicy= AccessByIPAddress
idp.reload.accessPolicy= AccessByIPAddress


but when I try https://<idphost>/idp/status it gives access denied error,

Do I have to configure anything else? basically need is how to enable the status (previous https://<idphost>/idp/profile/Status) in IdP 3.3.x for a specific IP

Thanks




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170728/4eca676b/attachment.html>