SP 2.x doesn't respect consistentAddress="false" setting

Cantor, Scott cantor.2 at osu.edu
Thu Sep 21 11:31:08 EDT 2017


On 9/21/17, 8:46 AM, "users on behalf of Mark Vinkx" <users-bounces at shibboleth.net on behalf of mark.vinkx at uzleuven.be> wrote:

> My previous try, setting the header I wanted shibboleth to use in the apache config,  was a quick hack and shibboleth didn't like
> it.

I don't think that was the issue.

> I tried to do it the right way and that worked

There isn't any "right" way, the header name is arbitrary. It's also unsafe no matter how you do it unless you know for a fact that the proxy won't allow the client to override the header.

-- Scott




More information about the users mailing list