IIS 7.5 Server behind an F5 Reverse Proxy

[Cantor, Scott]

On 8/25/14, 7:18 PM, "Meiselman, Ellen" <emeiselm at med.umich.edu> wrote:
>
>We didn't find any smoking guns until we changed the relayState setting
>to "cookie" and inspected the value of the cookie. It turns out there is
>alway a double slash after the "content" part of the path:
>
>There are absolutely no trailing slashes after the word "content" in
>shibboleth2.xml. 

Well, it's your proxy doing it.

>A. Do you think the extra slash in path in the cookie value might cause
>the looping problem?

I doubt it, but I guess it's possible. The issue isn't what the URLs are
per se, but where/when the session cookie is dropped. That should be
evident from a trace. Once the droppage is confirmed and on what step,
it's a given that there's a mismatch between where it's set and where's
it's not sent back. Then you can figure out which one is off.

Is there some value this reverse proxy is providing?

-- Scott