IdP 3 and Stale Requests

[James Gross]

Scott,
I thought that as a potential cause previously as well but have verified
that session persistence is set for 30 minutes on the load balancer.  I'm
wondering if the way the Duo (v3) plugin is injecting itself as a subflow
may be causing an issue. The odd thing to me is that this is affecting such
a small number of users in a very intermittent way. Shibboleth is our
primary web authentication service and on peak days the last couple weeks
have been servicing 100k+ login/logout requests. We've had maybe 25 people
or so with this issue and for those people, no amount of troubleshooting
seems to resolve the issue.

------------------------------
*James Gross* | Enterprise Application and CMS Developer (Enterprise Web
Services)

UNC Charlotte | Information Technology Services

9201 University City Blvd. | Charlotte, NC 28223

Phone: 704-687-0298 | Office: Kennedy 301-C39

jgross15 at uncc.edu | http://www.uncc.edu
------------------------------

If you are not the intended recipient of this transmission or a person
responsible for delivering it to the intended recipient, any disclosure,
copying, distribution, or other use of any of the information in this
transmission is strictly prohibited. If you have received this transmission
in error, please notify me immediately by reply e-mail or by telephone at
704-687-0298. Thank you.



On Mon, Nov 9, 2015 at 11:01 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 11/9/15, 10:59 AM, "users on behalf of James Gross" <
> users-bounces at shibboleth.net on behalf of JamesGross at uncc.edu> wrote:
>
>
>
> >One point of clarification I just received is that they are presented
> with the Stale Request error immediately AFTER they put in their
> credentials and submit the form.
>
> That sounds like a non-sticky load balancer.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151109/7a27a913/attachment.html>