[JIRA] Resolved: (SSPCPP-393) Setting session timeout="0" creates infinite loop between SP and IDP

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SSPCPP-393?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SSPCPP-393.
---------------------------------

    Resolution: Fixed

Use lifetime of session as cache eviction setting if timeout and allowance are both 0.

http://svn.shibboleth.net/view/cpp-sp?view=revision&revision=3528

> Setting session timeout="0" creates infinite loop between SP and IDP
> --------------------------------------------------------------------
>
>                 Key: SSPCPP-393
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-393
>             Project: Shibboleth SP - C++
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 2.4.3
>         Environment: We could reproduce this on a test SP running 2.4.3 in redhat 5.6
> The SP is configure to use only one IDP. We are using RPM from suse repository.
>            Reporter: Russell Yount
>            Assignee: Scott Cantor
>            Priority: Minor
>              Labels: Session
>             Fix For: 2.5
>
>   Original Estimate: 4 hours
>  Remaining Estimate: 4 hours
>
> When SP is configured with <Sessions lifetime="28800" timeout="0" checkAddress="false" >relayState="ss:mem" handlerSSL="true">
> Browser continuously redirects between IDP and SP.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira