Strange Shib SP behaviour during service access from UAE

[Stefan Santesson]

I’m totally puzzled by this and hope someone recognize this and can hint me what this is all about.

I have a service protected by Shibboleth SP, that has been running flawlessly for a long time.

I’m currently in United Arab Emirates (Abu Dhabi) on a job and was trying to demonstrate my service from here.
The result is strange.

- When changing webpages within the protected domain/host shib does not recognize that I have a valid authenticated session and sends me to the discovery service.
- Sometimes, the web application does not receive authenticated attributes from shib even if the assertion contains all attributes (using AJP headers).

I know that UAE have some kind of national firewall that filters and blocks stuff.
But even when running over VPN where all traffic is sent over VPN, I still get the same problems.

However, If I open a remote desktop to a computer at home and run the service from there, everything works again without any problem.

Shibboleth SP logs does not reveal any problems of any kind. However I have not turned logging up to debug level yet.

I’m at lost. Anyone seen anything like this?

/Stefan