Enable IdP Status in IdP 3.3.x

[Lalith Jayaweera]

Thanks

After all sort of routing.... it hits with a completely different IP

but all good and working fine

On Fri, Jul 28, 2017 at 10:05 AM, Klingenstein, Nate <
nklingenstein at calstate.edu> wrote:

> Lalith,
>
>
> The only consistent way to know which IP address is being used to
> communicate with your IdP is to check your web server's access logs to see
> which IP address it thinks your queries are coming in from.  That IP will
> work if you configure it in.
>
>
> Take care,
>
> Nate.
> ------------------------------
> *From:* users <users-bounces at shibboleth.net> on behalf of Lalith
> Jayaweera <ljayaweera at gmail.com>
> *Sent:* Thursday, July 27, 2017 4:53:20 PM
> *To:* Shib Users
> *Subject:* Enable IdP Status in IdP 3.3.x
>
> I wanted to enable  idp status (https://<idphost>/idp/status) for a
> specific IP
>
> I modified  access-control.xml and added
>
>   <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"
>                 p:allowedRanges="#{ {'xxx.xxx.x.xxx/32', '::1/128'} }" />
>
> also in idp.properties I got below
>
> idp.status.accessPolicy= AccessByIPAddress
> idp.resolvertest.accessPolicy= AccessByIPAddress
> idp.reload.accessPolicy= AccessByIPAddress
>
>
> but when I try https://<idphost>/idp/status it gives access denied error,
>
> Do I have to configure anything else? basically need is how to enable the
> status (previous https://<idphost>/idp/profile/Status) in IdP 3.3.x for a
> specific IP
>
> Thanks
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170728/06e8fb1f/attachment-0001.html>