"Replay detected of message" causes

[Christopher Bongaarts]

On 4/19/2017 8:06 PM, Klingenstein, Nate wrote:
>
> Failed HTTP requests and resorting to the back button if they get 
> a "this page couldn't load" at some point. It's specifically occurring 
> only on devices using cellular networks, some mobile providers have 
> spotty coverage here, and our users expect to be able to login without 
> human interaction in most situations.  I think that confluence of 
> factors to be why I hear this so much now.
>
>
> Why do people apparently get stuck consistently on this particular 
> check?  I can think of several reasons, but initial DNS resolution of 
> the IdP combined with traffic prioritization by the mobile carriers 
> smells very suspicious to me.
>

How about rapid shifts between cellular IP service and one or more wifi 
networks?

(We currently have lots of people getting NoSuchFlowExecutionException 
errors, because I forgot to add the manual changes to treat them as 
StaleRequest during our 3.3.0 upgrade; apart from opening links in 
Office, a large number of them seem to be caused by the client shifting 
IP addresses between requests, which prevents our load balancer from 
properly "stickying" them...)

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170420/79871a3a/attachment.html>