MemcachedStorage and IdP3

[Marvin Addison]

On Wed, Aug 23, 2017 at 2:48 PM O'Dowd, Josh <Josh.O'Dowd at mso.umt.edu>
wrote:

> Basically, I am trying to figure out if a session is lost when Idp tries
> to retrieve it from a now unavailable(timing out) node
>

That's what happens. If the node holding the IdPSession object goes down,
it has the same effect as if the IdP session were terminated and the user
will have to log in again.

I intend to scratch my own itch in coming months and write an IdP storage
backend for Redis to provide better resiliency in the case you described.
For us the memcached behavior has been tolerable since our memcached
daemons have uptimes measured in months if not years, but we can do better
with a key-value store that has replication built in. Hazelcast is similar;
I believe there's an IdP component for that technology today (Unicon
developed it IIRC).

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170824/18de7455/attachment-0001.html>