[External] Re: Multiple removals of Shibd session

[Wang, John]

Scott,
In the Shibboleth Service Provider, the checkAddress is set to be false and consistentAddress was not set.  The Apache Web server logs the IP address of Amazon Load Balancers (ALB) rather than user’s IP address. So, I can see the change in ALB’s IP address rather than user’s.

Thanks,

John Wang

From: Cantor, Scott <cantor.2 at osu.edu>
Date: Monday, October 7, 2024 at 1:41 PM
To: Wang, John <john.wang at emory.edu>, Shib Users <users at shibboleth.net>
Subject: Re: [External] Re: Multiple removals of Shibd session
> Do you think the “removed session” by Shibd was caused by
> the switching nodes of ALB?

The link I sent before answers that question explicitly.

And the web server shouldn't be seeing those addresses, you need to set up remote address forwarding to get the client's address properly sent through and picked up by Apache.

-- Scott

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241007/05b1a2b8/attachment.htm>