Detection of replay attack in clustered environment

[Cantor, Scott]

On 2/10/14, 5:49 AM, "KajoKrtko" <acojakochces at gmail.com> wrote:

>Hi,
>
>Is it a good idea to detect replay attack by collecting assertion id and
>comparing them? In clustered environment. I'd collect it in our database
>and
>compare with incoming assertions.

I can't imagine somebody not clustering the SP but manually trying to
cluster the replay cache.

>- https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPClustering
>would not work in our environment because I can't use shared net and
>Shared
>DB plugin is beta.

I don't know what beta thing you're talking about. If you had a database
that wasn't broken and a driver that wasn't broken, you should use the
ODBC plugin.

-- Scott