From fd9b1ff6c12684955b3f3f90031df2e29b5ea303 Mon Sep 17 00:00:00 2001
From: Sean Porth <sporth@unicon.net>
Date: Fri, 18 Nov 2022 08:40:05 -0500
Subject: [PATCH] change oidc admin authz to ipaddress

---
 .../config/shib-idp/conf/access-control.xml            |  2 +-
 .../config/shib-idp/conf/oidc.properties               | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/testbed/integration/shibboleth-idp/config/shib-idp/conf/access-control.xml b/testbed/integration/shibboleth-idp/config/shib-idp/conf/access-control.xml
index 5a0b0d14b..f74884517 100644
--- a/testbed/integration/shibboleth-idp/config/shib-idp/conf/access-control.xml
+++ b/testbed/integration/shibboleth-idp/config/shib-idp/conf/access-control.xml
@@ -38,7 +38,7 @@
 
         <entry key="AccessByIPAddress">
             <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"
-                  p:allowedRanges="#{ {'127.0.0.1/32', '::1/128', '172.16.0.0/12'} }" />
+                  p:allowedRanges="#{ {'127.0.0.1/32', '::1/128', '172.16.0.0/12', '192.168.16.0/24'} }" />
         </entry>
 
         <!--
diff --git a/testbed/integration/shibboleth-idp/config/shib-idp/conf/oidc.properties b/testbed/integration/shibboleth-idp/config/shib-idp/conf/oidc.properties
index 09d6ebd60..91c3d731d 100644
--- a/testbed/integration/shibboleth-idp/config/shib-idp/conf/oidc.properties
+++ b/testbed/integration/shibboleth-idp/config/shib-idp/conf/oidc.properties
@@ -104,17 +104,17 @@ idp.oidc.subject.salt = eezien3iteit0gaiciiweayohxahmai6
 # Settings for issue-registration-access-token flow
 #idp.oidc.admin.registration.logging = IssueRegistrationAccessToken
 idp.oidc.admin.registration.nonBrowserSupported = true
-idp.oidc.admin.registration.authenticated = true
+idp.oidc.admin.registration.authenticated = false
 #idp.oidc.admin.registration.resolveAttributes = false
 #idp.oidc.admin.registration.lookup.policy = shibboleth.oidc.admin.DefaultMetadataPolicyLookupStrategy
 #idp.oidc.admin.registration.defaultTokenLifetime = P1D
-idp.oidc.admin.registration.accessPolicy = AccessByAdminUser
+idp.oidc.admin.registration.accessPolicy = AccessByIPAddress  
 #idp.oidc.admin.registration.policyLocationPolicy = AccessByAdmin
-idp.oidc.admin.registration.policyIdPolicy = AccessByAdminUser
+idp.oidc.admin.registration.policyIdPolicy = AccessByIPAddress
 #idp.oidc.admin.registration.clientIdPolicy = AccessByAdmin
 
-idp.oidc.admin.clients.authenticated = true
-idp.oidc.admin.clients.accessPolicy = AccessByAdminUser
+idp.oidc.admin.clients.authenticated = false
+idp.oidc.admin.clients.accessPolicy = AccessByIPAddress
 
 #
 # OAuth2 Settings - these typically involve generic OAuth 2.0 use cases