Meteor.js and Shibboleth IP

[Izz Abdullah]

I would have thought this would be the session conditions on when a session is valid.  Below is an example from an assertion where Sessions timeout=3600 ::
<Conditions NotBefore="2015-06-26T09:54:00.237Z" NotOnOrAfter="2015-06-26T10:54:00.237Z">

I missed the original question as I only joined this list yesterday at 4.40p CDT and apologize in advance of having inferred the original question to the problem.
http://shibboleth.1660669.n2.nabble.com/seemingly-clock-skew-issue-but-td6481567.html
Please correct me if my understanding is incorrect.

If this is indeed the case, why wouldn't both values be "incorrect" and still have a span of the Session timeout (e.g. 1 hour)?

Izz Abdullah
Sr. Systems Engineer

izz.abdullah at wepanow.com
Toll Free 1(800)675-7639
100 Gilbert Drive | Alabaster, Alabama 35007

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Truby Voglund
Sent: Friday, June 26, 2015 12:36 AM
To: Shib Users
Subject: Re: Meteor.js and Shibboleth IP

Scott,

That message is what I found in the logs, so it is coming from testShib or from Shibboleth IdP.  YEah the times are confusing, so what is the actual first time, and teh second time in the error message?

Truby

________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, June 25, 2015 6:25 PM
To: Shib Users
Subject: RE: Meteor.js and Shibboleth IP

> I am a rookie at setting up an SP to the Shibboleth IdP so I apologize 
> for my lack of knowledge.  But I have fixed the error below and getting a new one.
> The error is,
>
> Message was not yet valid: message time was 2015-06-25T23:10:20.000Z, 
> latest valid is: 2015-06-25T17:15:28.388-04:00

I guess your clock is off. That should be fairly clear from that message.

> I can attach the entire error log, but from email below looks like you 
> know how to get there.  Is both these times in Zulu?

No, one is in UTC and one is a local time with a 4 hour offset. Whoever is dumping that message is not helping matters, so hopefully that's not us being stupid, or we'll fix it. Where is that message from?

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net