<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-ce0b67b2-0dd3-41df-9336-37da9bb3f69c" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="haimm@idp.protectnetwork.org" id="email_haimm@idp.protectnetwork.org" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=haimm%40idp.protectnetwork.org" style="color:#3b73af;; color: #3b73af; text-decoration: none">haimm@idp.protectnetwork.org</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1228" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-1161e712-f427-4f20-ada6-04478a92e42c" height="16" width="16" border="0" align="absmiddle" alt="Bug"> IDP-1228</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1228" style="color: #3b73af; text-decoration: none">Re: Attribute release consent fails (sometimes)</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">There is another detail I have found in my HAproxy logs:</p> <p style="margin: 10px 0 0 0">For the failing requests, there is nearby no delay (i.e. only about a second) between showing and accepting the attribute consent page:<br> (in curly braces { } the REFERER and USER-AGENT are logged):</p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-none" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
Oct 19 23:03:15 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.83.175 [19/Oct/2017:23:03:15.727] "GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZLBUsIwEIZfpZM7pC0gkKGdqXCQGRSGVg9enKRdaGbSpGRT0be3UFT0wDl%2Fvn%2F3m50hr1TNksaVeguHBtB5H5XSyM4PEWmsZoajRKZ5BchcztLkccXCvs9qa5zJjSJeggjWSaPnRmNTgU3BvsscnreriJTO1cgoPUjsN1r2Km5FY%2Ff9AmhaSiGMAlf2EQ09kUO6WacZ8RbtKFLzE%2FQXcQShzF7q%2FxxZ1LSdZicVXCBbKKSF3NE0XRNvuYjI22Q6CMNJHojdbghDMRrA5A7GU8Gn%2BVhMgrCNITaw1Oi4dhEJ%2FWDcC%2FxeMM3CgPkDFoxeibe5LH0vdSH1%2FrYh0YWQPWTZptct9gIWz0u1ARLPTp7Zudhemb%2BN5d%2B6SXxDLv7IndGrlq6yZk8tdrnYGCXzTy9RyhznFriDiASExt2Xv5cRfwE%3D&RelayState=cookie%3A1508446995_23cf&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=lVdlPigknxhWffnIYekimGxreR2JSnGPCHuFh0gOpTUE4rWQWb4bYNx19tS8kb1KC93Arz4k9NXiyA06MTy7DoPch6CjFZU6cB0tTlv6Cj6ohjWwRWFHUC3rMgO8QO6fl62wBMP%2BPBHynPYx1h3yuBxByn50Y5LQTOK2UpY%2BLlQP%2FnkQ76PrQBkvCdicTG0PaO5b65PW0%2FkfQ6Sr9fwcvTAPkL2aYGNnvRqTICOxoowbOFhK1YCe07k%2BvQcByJfI4lYdWcShwO%2BI5s2nXzqfH4IX3zvSU%2FnINlbJYbQZpPAPU0Ku7bGR%2FC9ODbzEKvbl7vNeDGENI3b%2FIOFcpSLgKQ%3D%3D HTTP/1.1" 302 286 "{|Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14}"
Oct 19 23:03:15 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.175 [19/Oct/2017:23:03:15.898] "GET /idp/profile/SAML2/Redirect/SSO;jsessionid=5E89F6D5D4E76F3F3CA103ADFBE48B43?execution=e1s1 HTTP/1.1" 200 25442 "{|Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14}"
Oct 19 23:03:16 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.83.175 [19/Oct/2017:23:03:15.932] "POST /idp/profile/SAML2/Redirect/SSO;jsessionid=5E89F6D5D4E76F3F3CA103ADFBE48B43?execution=e1s1 HTTP/1.1" 302 316 "{|Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14}"
Oct 19 23:03:16 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.83.175 [19/Oct/2017:23:03:16.499] "GET /idp/profile/SAML2/Redirect/SSO;jsessionid=5E89F6D5D4E76F3F3CA103ADFBE48B43?execution=e1s2 HTTP/1.1" 200 27703 "{|Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14}"
Oct 19 23:03:16 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.83.175 [19/Oct/2017:23:03:16.532] "POST /idp/profile/SAML2/Redirect/SSO;jsessionid=5E89F6D5D4E76F3F3CA103ADFBE48B43?execution=e1s2 HTTP/1.1" 200 15360 "{|Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14}"
</pre>
</div>
</div> <p style="margin: 10px 0 0 0">While for successful requests, you can see how the user takes a few seconds to read and accept the attribute consent page:</p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-none" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
Oct 20 15:06:09 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.3.97 [20/Oct/2017:15:06:09.361] "GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJRT4MwFIX%2FCuk7KzAHsxkkuD24ZLplTB98MQWuo0lpWW9x%2Bu%2BFMXX6sDTpS8%2F9zj0nnSGvZcPS1lZqC4cW0DoftVTITg8xaY1imqNApngNyGzBsvRhxYKRxxqjrS60JE6KCMYKreZaYVuDycC8iwKetquYVNY2yCg9CBy1Srg1N3lr9qMSaFaJPNcSbDVC1LQnB3SzznbEWXSrCMV76C%2FiCLnUe6H%2Bc0TZ0G6bNyHhDNlCKQwUlmbZmjjLRUxeYXLD%2BxNF00l3leNpWN7mXhB6PoTTiHcyxBaWCi1XNiaB50eu77mBt%2FPHzAuZd%2FtCnM059J1QpVD76w3lgwjZ%2FW63cYdgz2DwFKoTkGTW98xOxuai%2BetY%2Fl03Sa6Uiz%2FlzuiFy2DZsMcOu1xstBTFp5NKqY9zA9xCTHxCk2Hk789IvgA%3D&RelayState=cookie%3A1508504769_9f47&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=TwBWvBzJqRLFBPfd8ZIAOUnhXF5CP2ec1xAmtvZVlUyoZCWo7wdDhpQ7NvgfUV%2B3pcqZ25uSh6KOQeQejc4vioLbXLG9O1nPCBptQeBhxtBiG14AHRR1QVTV5jCgifSixZ%2FfHNYfKiJVHr9gv4FzvAAv7XMtZDBgSWTmOhC4wkCZ4c3HQ8d6106V5b9wsGwDNK97GNxrfe5cSnYJkcTgV2HIzH2f%2Fvih1S7VAJlQrkxnF3q0JQsWwF8gPYF2QUclChItMOfjGHcJfwqoFS52gfT0K%2FWj3sWvAfb4BrGmhL7KBV8nwF7sGCOzm2QQ0nkTiUrQdmkoYP8RU2PYBqmpWQ%3D%3D HTTP/1.1" 302 286 "{https://qis.uni-marburg.de/qisserver/rds?state=user&type=0|Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0}"
Oct 20 15:06:09 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.3.97 [20/Oct/2017:15:06:09.381] "GET /idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s1 HTTP/1.1" 200 25684 "{https://qis.uni-marburg.de/qisserver/rds?state=user&type=0|Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0}"
Oct 20 15:06:15 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.3.97 [20/Oct/2017:15:06:09.771] "POST /idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s1 HTTP/1.1" 302 316 "{https://weblogin.uni-marburg.de/idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s1|Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0}"
Oct 20 15:06:15 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.3.97 [20/Oct/2017:15:06:15.643] "GET /idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s2 HTTP/1.1" 200 27970 "{https://weblogin.uni-marburg.de/idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s1|Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0}"
Oct 20 15:06:18 idp haproxy[23439]: 192.168.16.76:8080 xxx.xxx.3.97 [20/Oct/2017:15:06:15.674] "POST /idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s2 HTTP/1.1" 200 15360 "{https://weblogin.uni-marburg.de/idp/profile/SAML2/Redirect/SSO;jsessionid=FFC6FABCBB954742A39F86F9E29F3DE0?execution=e1s2|Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0}"
</pre>
</div>
</div> <p style="margin: 10px 0 0 0">Please note that we have global consent disabled. Is there anything else which could lead to submitting the attribute consent page without another mouseclick?</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1228#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-b7201726-e2f7-42c0-8359-9e0136815837" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1228#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-3d538109-795c-42f1-8926-6edce5c663a0" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>