SP Expiring the User Session - Why??

[ragadeep]

> >You mentioned IP address checks on native side - what do you mean by
> >this? Which logs are you referring to?
> 
> I mean the IP consistency checking. The only warning logged for that is on
> the native half.
> 
> -- Scott

Thanks for the info Scott! Just wanted to share with everyone that it ended up being an IP mismatch very similar to what is outlined in the thread below
http://shibboleth.1660669.n2.nabble.com/IP-address-mismatch-issues-td7586969.html


For the folks who may want to know what we did
- Enabled the logging in DEBUG mode in the native.logger under shibboleth
- Noticed that there was an error as below in the shibd_native_warn.log

2013-12-10 16:18:05 WARN Shibboleth.SessionCache [18182] shib_check_user: client address mismatch, client (123.45.67.890), session (234.56.44.212)
2013-12-10 16:18:05 WARN Shibboleth.ServiceProvider [18182] shib_check_user: error during session lookup: Your IP address (123.45.67.890) does not match the address recorded at the time the session was established.

I have some further questions on how this be approached and will ask in the "IP Address Mismatch Issues" thread

Thanks
Ragadeep
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131211/66294e6f/attachment.html