Kerberos Client Selection Strategy - IP Based Kerberos Selection

[RJ]

Anyone tried this in CAS 5.0.x ? from the right IPs 10.10.x.x, Kerberos login works fine. From other IPs, it goes into a loop and finally gives up.

Clues/thoughts please. Thanks

cas.authn.spnego.hostNameClientActionStrategy=baseSpnegoClientAction
cas.authn.spnego.ipsToCheckPattern=10.10.+

    <action-state id="initializeLoginForm">
        <evaluate expression="initializeLoginAction" />
<!--     <transition on="success" to="viewLoginForm"/> -->
<!--     <transition on="success" to="startSpnegoAuthenticate"/> -->
        <transition on="success" to="evaluateClientRequest"/>
    </action-state>