Announce: Database Backed Storage Service
Paul Hethmon
paul.hethmon at clareitysecurity.com
Mon Oct 21 08:36:46 EDT 2013
Keith,
That should be correct. You should see that the object index value is
different for the 3 rows and correspond to the different ways Shib will
look up the session.
One thing I have noticed though is that some rows in the table will end up
orphaned. I've not spent anytime trying to track it down, but I have put
in place a sproc to delete expired rows on a periodic basis. The Shib
storage sweeper should be doing that job.
Paul
On 10/18/13 11:33 AM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>Hi, Paul,
>
>Things seem to be working. I just want to make sure what I'm seeing in
>the database makes sense, though.
>
>It appears, after a successful authentication, I'm getting three rows in
>the database. Not sure yet if they all three get created at the same
>time, or if it happens at different points during the authentication
>process. One row has my username correctly entered in the login_id
>column. Two other rows with different uids, of course, have no login_id
>or session_expiration_time, but they seem to have the same session_id.
>
>Is this expected? Or is this a bug that was introduced by the MySQL to
>Oracle conversion?
>
>Thanks,
>Keith
>
>
>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>On Behalf Of Paul Hethmon
>Sent: Wednesday, October 16, 2013 4:29 PM
>To: Shib Users
>Subject: Re: Announce: Database Backed Storage Service
>
>Keith,
>
>That sounds fine to me, it will let them be recorded in the archive as
>well.
>
>Paul
>
>On 10/16/13 5:23 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>>Thanks, Paul. The database row is now being created and, I think,
>>updated. Both IDP nodes can see it. Terracotta's still in the mix,
>>though. Should be just a quick modification to my start-up process to
>>undo that, and we'll see if it's actually doing everything correctly.
>>I'll have news for you tomorrow morning at the latest if there's a
>>problem, but it looks like we have success.
>>
>>Shall I just share my sql files with the list since they're small, and
>>you can add them to the contributed examples from there?
>>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
More information about the users
mailing list