Shibboleth Developers

["RL 'Bob' Morgan" <>]

On Thu, 20 Oct 2005, Ian Young wrote:

> Just as a reminder, I have some code for the IdP that handles this 
> particular case (IdP and some set of SPs behind a NAT) by rewriting the 
> client's IP before sending it to an SP that is outside the NAT.
>
> There was a bit of a deafening silence around this last time round, but 
> if people are interested, I could try reintegrating that with CVS HEAD 
> again.

Sounds like it could be useful.  I'd vote for having it be a feature, 
modulo any extra complexity it might cause for other parts of the IdP or 
its configuration.  I think we might use it here rather than try to make 
all of our external SPs turn off checking.

 - RL "Bob"