Client sent a cookie from address ... but the cookie was issued to address ...

[Paul Hethmon]

And I would point out the big elephant in the room that will always cause
this: AOL dial-up users


If you have users using AOL dial-up, each request can come from a
different IP address. It plays hell with everything.

Paul


On 2/10/12 2:33 PM, "Chad La Joie" <lajoie at itumi.biz> wrote:

>On Fri, Feb 10, 2012 at 14:29, Turner, Andrew P <A.P.Turner at shu.ac.uk>
>wrote:
>>I also used to see this a lot before we realised that using a SNAT pool
>>on our BIG-IPs didn't also do SNAT persistence, therefore the user
>>sometimes came from a different source address for different requests.
>
>Right, so as far as the IdP was concerned, the client had change IP
>address.  There are many reasons this can happen (i.e.,
>not-so-transparent HTTP proxies) but as far as the IdP can see: a
>clients address changed.
>