From: Mike Taylor <mike@indexdata.com>
Date: Tue, 22 Jul 2014 16:37:27 +0000 (+0000)
Subject: Add constraint-based authentication for hostName; remove IP-based authentication
X-Git-Tag: 1.0.0~371^2~10^2~1
X-Git-Url: http://sru.miketaylor.org.uk/cgi-bin?a=commitdiff_plain;h=4c4047a68b77c251eac5275ea1637080c17c58e7;p=mkws-moved-to-github.git

Add constraint-based authentication for hostName; remove IP-based authentication
---

diff --git a/tools/service-proxy/service-proxy.properties b/tools/service-proxy/service-proxy.properties
index 4f851bf..8f4c8d8 100644
--- a/tools/service-proxy/service-proxy.properties
+++ b/tools/service-proxy/service-proxy.properties
@@ -24,8 +24,8 @@ relay.CF_ENGINE_ADDRESS = localhost:9003
 # authn plugin, for torus based authentication 
 authn.TORUS_URL        = http://mkc-admin.indexdata.com/torus2/identity.USERS/records/
 authn.MASTER_TORUS_URL = http://mkc-admin.indexdata.com/torus2/admin.admin/records/
-authn.ACTION_SEQUENCE = check,login,ipauth,referrer
-#authn.SPECIFIC_CONSTRAINT = vhost=${thisHost} 
+authn.ACTION_SEQUENCE = check,login,referrer,constraint
+authn.SPECIFIC_CONSTRAINT = hostName=${thisHost} 
 
 # categories plugin, for Torus-based target categories
 categories.TORUS_BASEURL            = http://mkc-admin.indexdata.com/torus2/