Client sent a cookie from address ... but the cookie was issued to address ...

[Chad La Joie]

Yes, they would be the not-so-transparent proxy that was in my mind.

On Fri, Feb 10, 2012 at 14:58, Paul Hethmon
<paul.hethmon at clareitysecurity.com> wrote:
> And I would point out the big elephant in the room that will always cause
> this: AOL dial-up users
>
>
> If you have users using AOL dial-up, each request can come from a
> different IP address. It plays hell with everything.
>
> Paul
>
>
> On 2/10/12 2:33 PM, "Chad La Joie" <lajoie at itumi.biz> wrote:
>
>>On Fri, Feb 10, 2012 at 14:29, Turner, Andrew P <A.P.Turner at shu.ac.uk>
>>wrote:
>>>I also used to see this a lot before we realised that using a SNAT pool
>>>on our BIG-IPs didn't also do SNAT persistence, therefore the user
>>>sometimes came from a different source address for different requests.
>>
>>Right, so as far as the IdP was concerned, the client had change IP
>>address.  There are many reasons this can happen (i.e.,
>>not-so-transparent HTTP proxies) but as far as the IdP can see: a
>>clients address changed.
>>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered