Lost session

[Xiaoshu Wang]

Right, part of the activities requires Shib, but other not. That is why it is configured like that so when there is Shib session, the attributes will be passed. 

The problem takes place when there is no valid Shibboleth session. I thought in that case, Shibboleth should just hand out what it gets to Glassfish. But apparently it does not. I have done the control.

No Shib --> O.K.
ShibUseEnvironment --> O.K.
ShibUseHeader --> No.

It is the same application run in each of these setting. So, it shows that somehow ShibUserHeader has interfered. Otherwise, it shouldn't give me the above result, right? But I do not know what so hope your guys can give me some insight. It is not difficult to duplicate the problem as I have tested both on my local machine setup and our school's cluster. In both cases, the above result stand.  

-- 
Xiaoshu Wang
Sent with Sparrow (http://www.sparrowmailapp.com/?sig)


On Tuesday, September 3, 2013 at 8:50 PM, Cantor, Scott wrote:

> On 9/3/13 8:27 PM, "Xiaoshu Wang" <xiaoshuw at email.unc.edu (mailto:xiaoshuw at email.unc.edu)> wrote:
> > My application is configured as such.
> > 
> > <Location /myapp>
> > AuthType shibboleth
> > ShibRequestSetting requireSession 0
> > ShibUseHeaders On
> > Require shibboleth
> > </Location>
> > 
> > The strange behavior is that when I send multiple requests (typical AJAX
> > behavior) simultaneously to the server, it will result a session loss.
> > That is the request leads to the creation of a new session, instead of
> > holding on to the previously created session, on the server side.
> > 
> 
> 
> You have no requirement for a session above, so I don't understand your
> statement here, but you're going to have to diagnose the cookie issue
> involved if you have a session problem.
> 
> > If I took off the Shibboleth, then things work fine. If I change the
> > ShibUserHeaders to ShibUseEnvironment, then it will also work. I wonder
> > what has caused this and is there anyway to get around it?
> > 
> 
> 
> The header vs. environment difference is solely in how you access the data
> on the server side and cannot have any effect on session behavior.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net (mailto:users-unsubscribe at shibboleth.net)
> 
> 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130903/8fc4cb7c/attachment.html