<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.8.5">
</HEAD>
<BODY>
On Fri, 2016-03-04 at 18:49 +0100, Sander Maijers wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
... Based on section 6.11 of
<A HREF="https://www.switch.ch/aai/guides/idp/installation/#shibbolethidp">https://www.switch.ch/aai/guides/idp/installation/#shibbolethidp</A> and
my failed tests of various paths, including the one mentioned by
Daniel, it seemed that the status handler endpoint was no longer
available by default. But apparently that's not the case. Would you be
so kind to point me to the official IdP V3 documentation about the
status handler/monitoring of IdP availability?
</PRE>
</BLOCKQUOTE>
<BR>
When you sent your message, I checked my v3 clean install of the IDP and noticed I was getting an access denied from the status page. It appears I had missed configuring the access to the status page. If you are seeing an access denied error, you might want to check the following files:<BR>
<BR>
<BLOCKQUOTE>
idp.properties<BR>
<BLOCKQUOTE>
idp.status.accessPolicy= AccessByIPAddress<BR>
<BR>
</BLOCKQUOTE>
access-control.xml
<BLOCKQUOTE>
<PRE>
<entry key="AccessByIPAddress">
<bean parent="shibboleth.IPRangeAccessControl"
p:allowedRanges="#{ {'127.0.0.1/32', '::1/128'} }" />
</entry>
</PRE>
</BLOCKQUOTE>
</BLOCKQUOTE>
-daniel
</BODY>
</HTML>