Have you ever seen this pattern before?

[Cantor, Scott]

On 8/28/19, 5:55 PM, "dev on behalf of Dan McLaughlin" <dev-bounces at shibboleth.net on behalf of dmclaughlin at tech-consortium.com> wrote:

> Is this expected behavior?  If not, what might cause this?

That would take competing Apache children all colliding and handling requests from the same client and stepping on each other until the session and cookies are finally gone and stop reappearing and going back around again. Probably depends on why the session is removed too.

There's no "expected" behavior with a feature with so little usage but I don't know much about how Apache tends to handle clients and distribute connections and how things might step on each other. I imagine it's not that surprising.

The code obviously clears the cookie but it was implemented so that if a client tries to hold on to one there's a backstop against the session reviving itself, particularly if it's ended for reasons that wouldn't just invalidate it again. I doubt the logging levels are very optimal, it takes a lot of use of a feature to settle on what the noise should be.
 
-- Scott