premature session removal

[Wolter Lier]

Hi,

I saw already other entry's in this list about this subject, but so far not an answer for my issue.

Out users are experiencing premature session removal. Seems to happen after they stop using our application for a while (5 - 15 minutes) an then return to continue. They are then being redirected to Idp because there session on SP is removed. For what reason the session is removed is the main question.

In our SP config we've added these session cache settings which should provide for 8h session timeout, as far as I know:
<StorageService type="Memory" id="mem" cleanupInterval="900"/>
<SessionCache type="StorageService" StorageService="mem" cacheTimeout="28800" inprocTimeout="28800" cleanupInterval="900" cacheAssertions="false" cacheAllowance="28800"/>
<ReplayCache StorageService="mem"/>
<ArtifactMap artifactTTL="180"/>

In the Shibboleth log we find this:

2012-04-16 17:39:18 DEBUG XMLTooling.StorageService [15]: updated expiration of valid records in context (_bd62a4c2b1ca2bf3667c90d2baca717f) to (1334644758)   >>   being 2012-04-17 1:39 AM, so 8 hours later..!
2012-04-16 17:39:25 INFO Shibboleth.Listener [19]: detected socket closure, shutting down worker thread
2012-04-16 17:54:13 DEBUG Shibboleth.Listener [21]: dispatching message (remove::StorageService::SessionCache)
2012-04-16 17:54:13 INFO Shibboleth.SessionCache [21]: removed session (_bd62a4c2b1ca2bf3667c90d2baca717f)
2012-04-16 17:54:13 DEBUG Shibboleth.Listener [21]: dispatching message (US3245A/Login::run::SAML2SI)
>> Why is the session removed at 2012-04-16 17:54:13, while some 15 minutes before its expiration was updated to 8 hours later?


For the record, there are no SessionNotOnOrAfter entry's in the IdP provided assurations. IdP as far as I've been told is Ping Federate..

Any idea's much appreciated..!

Thanks, Wolter Lier
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120418/5091183e/attachment.html