Hi everyone, We have a CASified Tomcat environment and are looking for ways to exclude certain IP ranges from the SSO process. Basically, we're looking for a configuration for certain services that does not require the user to be SSO'd if they have an IP on our local network.
I know you can do IP based access control using a tomcat valve, but, I'm not totally sure how to make this behavior conditional and basically say: "If this user is from this IP range or SSO'd then they are permitted to access resources behind the provided URL" Does anyone have any experience with this sort of setup? I'd appreciate any advice.. Thanks very much.. ..Sean. _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
