From 4c4047a68b77c251eac5275ea1637080c17c58e7 Mon Sep 17 00:00:00 2001 From: Mike Taylor Date: Tue, 22 Jul 2014 16:37:27 +0000 Subject: [PATCH] Add constraint-based authentication for hostName; remove IP-based authentication --- tools/service-proxy/service-proxy.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tools/service-proxy/service-proxy.properties b/tools/service-proxy/service-proxy.properties index 4f851bf..8f4c8d8 100644 --- a/tools/service-proxy/service-proxy.properties +++ b/tools/service-proxy/service-proxy.properties @@ -24,8 +24,8 @@ relay.CF_ENGINE_ADDRESS = localhost:9003 # authn plugin, for torus based authentication authn.TORUS_URL = http://mkc-admin.indexdata.com/torus2/identity.USERS/records/ authn.MASTER_TORUS_URL = http://mkc-admin.indexdata.com/torus2/admin.admin/records/ -authn.ACTION_SEQUENCE = check,login,ipauth,referrer -#authn.SPECIFIC_CONSTRAINT = vhost=${thisHost} +authn.ACTION_SEQUENCE = check,login,referrer,constraint +authn.SPECIFIC_CONSTRAINT = hostName=${thisHost} # categories plugin, for Torus-based target categories categories.TORUS_BASEURL = http://mkc-admin.indexdata.com/torus2/ -- 1.7.10.4