IDP on Tomcat 8.5.x

[Domingues, Michael D]

With the additional qualifier of fool me once, shame on you, fool me twice, I'll seriously investigate just moving our deployment to Jetty and washing my hands of Tomcat.


Michael

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Domingues, Michael D <michael-domingues at uiowa.edu>
Sent: Tuesday, May 9, 2017 8:10:11 AM
To: 'Shib Users'
Subject: Re: IDP on Tomcat 8.5.x


For what it's worth (as the original reporter of the early 8.5 release issue), we haven't gotten back around to testing our deployment on 8.5.X again yet, but have seen numerous regression fixes come across Tomcat Announce with respect to the 8.5.X release path. It's entirely possible that we ran into one of those issues, though I haven't been able to pin it to any one of them specifically.


The behavior only manifested under real-world load, so to test this again we'll have to roll 8.5 out to our production tier. We'll likely do this in the coming weeks (once finals wrap) and I'll report back with any behavioral quirks we see.


Michael

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Peters C.L. <C.L.Peters at soton.ac.uk>
Sent: Tuesday, May 9, 2017 6:39:06 AM
To: 'Shib Users'
Subject: Re: IDP on Tomcat 8.5.x


Sure - all I did was add:


<CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" alwaysAddExpires="true"></CookieProcessor>


in to /etc/tomcat/context.xml. There are other ways of achieving similar results with certain caveats. The docs on the Tomcat website explain in detail: https://tomcat.apache.org/tomcat-8.5-doc/config/cookie-processor.html#Legacy_Cookie_Processor_-_org.apache.tomcat.util.http.LegacyCookieProcessor


Clayton

Apache Tomcat 8 Configuration Reference (8.5.13) - The ...<https://tomcat.apache.org/tomcat-8.5-doc/config/cookie-processor.html#Legacy_Cookie_Processor_-_org.apache.tomcat.util.http.LegacyCookieProcessor>
tomcat.apache.org
The CookieProcessor element represents the component that parses received cookie headers into javax.servlet.http.Cookie objects accessible through HttpServletRequest ...




________________________________
From: users <users-bounces at shibboleth.net> on behalf of Ortner Nikolaus <N.Ortner at fh-kaernten.at>
Sent: 09 May 2017 12:23
To: 'Shib Users'
Subject: Re: IDP on Tomcat 8.5.x

> (adding a CookieProcessor to context.xml to add an Expires field on
> to cookie because certain browsers not handling the Max-Age field)

Do you have a short how-to on this issue? - seems like the IE 11 still has this problem (for a test see: http://mrcoles.com/media/test/cookies-max-age-vs-expires.html)
Cookies test - Peter Coles<http://mrcoles.com/media/test/cookies-max-age-vs-expires.html>
mrcoles.com
Home Cookie Test Demo: max-age vs expires. Each test below sets a cookie with some combination of the "max-age" or "expires" parameters. It turns out that Internet ...



Kind regards.

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170509/0bc879a3/attachment-0001.html>