* Andy Swiffin <[log in to unmask]> [2009-12-15 17:26]:
> >>> On 15/12/2009 at 16:16, in message
> <[log in to unmask]>, Peter Schober
> <[log in to unmask]> wrote:
> >
> > While https://spaces.internet2.edu/display/SHIB2/IdPLogging defines
> > the log format for the relevant log files (process.log and audit.log),
> > the IP-address is not the unit where an individual user is being
> > identified (since it might also be a NAT gateway, a proxy, etc.).
>
> It might, but it usually isn't here.
Unless I've misunderstood the purpose: If you want to correlate an IdP
session with an SP session there are other things to check, besides
IP-addresses.
-peter
|