Re: [modauthtkt-users] TKTAuthIgnoreIP

[Kamaludeen M. R. <ra...@sp...>]

Hi,

We are using mod_auth_tkt module for our web-based application running on
Apache server. We are experiencing a problem of IP address mismatch when
the end-user HTTP request goes through several proxy servers.

We wonder whether the validation of ticket can be done without checking the
IP address encoded in the ticket? Not sure the option "TKTAuthIgnoreIP on"
will disable that. If it is, should we use a specific IP address in the
ticket or must it be left empty?

We also need to know whether the shared secret can be more than one entry
in the conf file?

Thank you

With Best Regards

Rafi
Singapore Polytechnic