SP 2.x doesn't respect consistentAddress="false" setting

[Mark Vinkx]

Hi

I’m facing the same problem.  Using EXABGP the clients are routed through one of two HAproxy server. Request arrive at the ShibbolthSP with the addresses of those HAProxies .
I didn’t find any jira issue so I’m not sure if the previous user reported it as a bug ?
Can you explain the work around with the REMOTE_ADDR a bit more.

VersioShibboleth
SP Version 2.6.0n

My config:
<Sessions lifetime="28800" timeout="3600" consistentAddress="false" checkAddress="false" relayState="ss:mem" handlerSSL="true" cookieProps="https">
   <SSO entityID="http://myidp">
      SAML2 SAML1
   </SSO>

Warnings in the log
2017-09-20 06:53:57 WARN Shibboleth.SessionCache [20] shib_check_user: client address mismatch, client (10.1.10.1), session (10.1.15.1)
2017-09-20 06:53:57 WARN Shibboleth.ServiceProvider [20] shib_check_user: error during session lookup: Your IP address (10.1.10.1) does not match the address recorded at the time the session was established.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170920/8dffc945/attachment-0001.html>