[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    RE: [Shib-Users] Expired message error
From:       "Scott Cantor" <cantor.2 () osu ! edu>
Date:       2010-07-30 23:17:15
Message-ID: 034b01cb303d$5917ee70$0b47cb50$ () osu ! edu
[Download RAW message or body]

> Just trying to gather information. There wasn't much information available
> for the error message, and I happened to find the link
> <https://bugs.internet2.edu/jira/browse/JOST-101>. While I didn't think it
> necessarily related due to the fact that it looked like a SP change, I was
> just checking.

That's an IdP change, not an SP change.

> Let me give you more information. It may or may not be useful. Below you
> will see several of the same type of errors in the IdP log at virtually
the
> same time. The listing is done using grep -B 1 for the expired message
> listing. The 3 SPs listed are all using the same AD controller, so should
> have the same time. Any further ideas what might be happening?

It might help to find out what message it actually is that's expired.

Normally a back button issue would cause replay errors, but it still looks
like that to me. Maybe you're clustering imperfectly in some way and the
back button is replaying the request to a different node and it trips the
expired error instead of a replay.

I assume not every request from particular SPs are failing, so that screams
"user doing something weird" to me.

-- Scott


[prev in list] [next in list] [prev in thread] [next in thread]