Upgrade to IDP 2.4.0 - Can not login

[Cantor, Scott]

On 10/17/13 1:41 PM, "Yusuf Tran" <Yusuf.Tran at kaplan.com> wrote:

>To confirm, I can test both versions side by side using the same browser
>and tools, I clear session and domain cookies each time.

Then you need to trace the traffic and track the session cookie and see
why it's not making it into the IdP or not being honored.

>All I do is amend my hosts file to point to the relevant IDP to test, so
>can confirm things work fine with IDP v 2.3.8, but if I change my hosts
>file with the upgraded IDP and check again than I get the error mentioned
>(after loggin in).
>I'm actually testing by taking one of two nodes out of a load balanced
>pool.

I would bet money you have a vhost mismatch of some kind causing one of
the flows to be broken.

>Over the last few days I've diff'ed the setup folders and caught all
>changes and customisations, really it's just the SLO entries, updated
>packages, updated relying-party etc, meticulous care was taken to get the
>setup files ready!

There really isn't anything in the configuration, it's cookie handling.

>This new cookie feature, is there a way we can make it behave like
>previous versions?

If it did, you'd get an empty assertion out, of no use. This isn't a
feature. It's changing the result of a given error condition. The error
would exist either way.

-- Scott