Lost session

[Cantor, Scott]

On 9/3/13 8:27 PM, "Xiaoshu Wang" <xiaoshuw at email.unc.edu> wrote:
>My application is configured as such.
>
><Location /myapp>
>   AuthType shibboleth
>   ShibRequestSetting requireSession 0
>   ShibUseHeaders On
>   Require shibboleth
></Location>
>
>The strange behavior is that when I send multiple requests (typical AJAX
>behavior) simultaneously to the server, it will result a session loss.
>That is the request leads to the creation of a new session, instead of
>holding on to the previously created session, on the server side.

You have no requirement for a session above, so I don't understand your
statement here, but you're going to have to diagnose the cookie issue
involved if you have a session problem.

> If I took off the Shibboleth, then things work fine. If I change the
>ShibUserHeaders to ShibUseEnvironment, then it will also work. I wonder
>what has caused this and is there anyway to get around it?

The header vs. environment difference is solely in how you access the data
on the server side and cannot have any effect on session behavior.

-- Scott