Timeout or something?

[Jason Gauthier]

Greetings,

  I have shib running in two very different environments with extremely (nearly identical) similar configurations and I am getting some really curious feedback.

Env 1:
Windows 2012, Apache, Shib as SP
Env 2:
Debian, Apache, Shib as SP

Both environments use the same IdP and the same exact metadata for it.

The scenarios are these:

Env 1:

Open a resource protected by shib, authentication occurs, everything works great.
When I leave the session unused for a period of time (unknown amount, but it has been around an hour) I come back and click a link I get the following:

opensaml::saml2md::MetadataException at (https://site.company.com/url)
Unable to locate metadata for identity provider (https://idp.example.org/idp/shibboleth)

However, merely reloading the page, appears to execute another authenticate and then all is well.
Nothing is logged by Shib directly, but apache reports this:
opensaml::saml2md::MetadataException at (https://site.company.com/url)
Unable to locate metadata for identity provider (https://idp.example.org/idp/shibboleth)

Env 2:
Open a resource protected by shib, authentication occurs, everything works great.
I can leave the session idle for the same amount of time, and this does not occur.

I'm confused about what is happening.   I'd appreciate any pointers.
Thanks!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130719/c8da8543/attachment.html