[External] Re: Multiple removals of Shibd session

[Wang, John]

Scott,
I set checkAddress="false" consistentAddress="false" in shibboleth2.xml in my test environment. I’ll keep you posted. Thank you so much for your quick response and advice. It is deeply appreciated.

Best regards,

John Wang

From: Cantor, Scott <cantor.2 at osu.edu>
Date: Monday, October 7, 2024 at 1:49 PM
To: Wang, John <john.wang at emory.edu>, Shib Users <users at shibboleth.net>
Subject: Re: [External] Re: Multiple removals of Shibd session
> In the Shibboleth Service Provider, the checkAddress is set to
> be false and consistentAddress was not set.

As documented, the latter defaults to true.

> The Apache Web server logs the IP address of Amazon Load
> Balancers (ALB) rather than user’s IP address. So, I can see
> the change in ALB’s IP address rather than user’s.

Yes, which is not how you want to deploy a web server.

-- Scott

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241007/13b54a90/attachment.htm>