Shibboleth Developers

[Lukas Haemmerle <>]

Hello

Today we noticed that Shibboleth is ipv6 capable, but only partially.
While it perfectly works when SP and IdP and user have an ipv4 and an
ipv6 ip, there occur problems when only the IdP and the user are ipv6
capable. In this case (and probably also when instead the IdP doesn't
support ipv6), the 'checkAddress="false"' setting of the Sessions
section in the SP config causes the SP to detect an IP mismatch , which
is not really surprising. However, this then results in an "IP Address
Mismatch". Of course, one could disable that security feature, but that
isn't the best solution I guess :)

Provided that ipv6 is spreading more and more, are there any plans to
make the Shibboleth SP completely ipv6 aware and is that possible at all?

Cheers
Lukas

-- 
-------  SWITCH - The Swiss Education & Research Network  ------
Lukas Haemmerle          NetServices       http://www.switch.ch/
SWITCH,  Neumuehlequai 6, P.O. Box,  CH-8021 Zurich, Switzerland

 Tel: +41 44 268 15 64  Fax: +41 44 253 98 98