How are the SPConfig clockSkew attribute and a Conditions NotBefore related?

[Brian Reindel]

Thanks Scott, this was the issue. It was an IP mismatch because of the
firewall/router that fronts our development servers. I have removed
the checkAddress and consistentAddress from the Sessions nodes in
shibboleth2.xml, and that fixed it.

On Mon, Jun 23, 2014 at 2:16 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/23/14, 2:13 PM, "Brian Reindel" <giantjamsandwich at gmail.com> wrote:
>
>>That the IP I have redacted is not actually the IP for the virtual
>>host configured. I'm wondering if that mismatch is causing the
>>expiration.
>
> Well, it's not the server, it's the client's address that's the issue.
>
> Check native.log and it should note any session validation errors I think.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net