Access limitation & User-Agent

[Marc Kalberer]

Thanks for the quick answer ;-)


Well, the HEAD request and the GNOME Virtual File System UA-string
> kind of give that away, yes.
>
yes , and but access should be done via this channel, shibboleth is setup
on a simple website, with no external services.

>
> I guess the only way such requests make any sense is if you
> Shibbolized a WebDAV resource?
>
no webdav access

>
> What's the actual issue with recieving those requests? Does it cause
> noticable load on your system?

Actually I experience some episodic down time (I don't know the exact
message, since the warning comes from a customer) , the server (apache)
stop answering for 3-4 minutes, and then comes back to normal.  I was
looking for the prob when I saw all those logs, and I was wondering if they
could be linked.
Anyway, if I can block those calls it will invalidate this possibility.

> Are you certain returning a error HTTP
> status code won't cause user-visible errors?
>
This error occurs only on this IP, that's why I suspect an "attack".  All
the other auth work without any problem.


>
> -peter
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
-- 
Programmers.ch
Développement WEB
Solutions libres et Opensources
Tel: ++41 76 44 888 72
Site: http://www.programmers.ch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171116/5fe6fd96/attachment-0001.html>