AccessByIPAddress with IPv6 addresses

[Cantor, Scott]

On 10/19/20, 3:41 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

>    I would love to be proven wrong :).

Well, I think that thread is impossible to follow but it's full of commits and mentions of the 9.4 branch. They intended to do work on that branch and there are commits and comments that mention they did. But I have no idea what any of it means.

There were all sorts of different cases going on, between the Host case, and the Address case, and the Forwarded and X-Forwarded cases, and they were apparently all inconsistent. I believe they settled on agreeing that they needed to be consistent with options to adjust them, and I'm certain they did, but their documentation is obviously horrible and so I really have no idea what they actually did in the end.

>    * I'm running jetty-9.4.32.v20200930, the latest released version, there are brackets in the address

And you're not using forwarded headers?

>    * The STRIP_IPV6 parameter was originally added in commit:

I see other commits with different property names than that one (e.g. LEGACY_IPV6). Maybe all of that got removed, I don't know at this point.

-- Scott