shib_check_user: error

[Collins, Leon]

Nate,

Thanks for the reply.  I have the timeout set pretty high already but somehow/somewhere it seems to be expiring around/sometime after about 15 minutes or so.

        <Sessions lifetime="28800" timeout="14400" relayState="ss:mem" checkAddress="false" handlerSSL="false" cookieProps="; path=/; secure; HttpOnly">


From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of "Klingenstein, Nate" <nklingenstein at calstate.edu<mailto:nklingenstein at calstate.edu>>
Reply-To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Monday, April 23, 2018 at 12:48 PM
To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Re: shib_check_user: error


Leon,


The Shibboleth SP also has its own set of expirations.  I would suggest extending the timeout in particular to something much longer and more significant for your application.


There is no meaningful coupling between IdP and SP sessions in a typical Shibboleth deployment, so know the full impact of the change, for good and bad.


https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions



Take care,

Nate.



________________________________
From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of Collins, Leon <Leon.Collins at itec.suny.edu<mailto:Leon.Collins at itec.suny.edu>>
Sent: Monday, April 23, 2018 7:17:21 AM
To: Shib Users
Subject: shib_check_user: error

All,

Can anyone tell me (point me in the right direction) why I'm seeing the below messages in my native.log file?  I can correlate those messages to an issue I'm seeing in my application protected by Shib whenever a user try edit/save some content.  For example, if the user is in the middle of editing and saving a wiki page and the below messages show up that means the user will lose all their changes to the wiki page when they try to save (although they it appears that they IDP session hasn't expired).

Shibboleth version 2.6.1.

Thanks,
Leon

-----------------------------------------------------------------------------------------------------------------------

2018-04-23 09:44:34 WARN Shibboleth.ServiceProvider [20294] shib_check_user: error during session lookup: Your session has expired, and you must re-authenticate.
2018-04-23 09:57:00 INFO Shibboleth.SessionCache : purging 1 old sessions
2018-04-23 09:57:13 INFO Shibboleth.SessionCache : purging 1 old sessions
2018-04-23 09:59:00 INFO Shibboleth.SessionCache : purging 1 old sessions
2018-04-23 09:59:06 ERROR Shibboleth.Listener [19658] shib_check_user: socket call (unknown) resulted in error (32): no message
2018-04-23 09:59:06 ERROR Shibboleth.Listener [19658] shib_check_user: remoted message returned an error: Your session has expired, and you must re-authenticate.
2018-04-23 09:59:06 WARN Shibboleth.ServiceProvider [19658] shib_check_user: error during session lookup: Your session has expired, and you must re-authenticate.
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180424/aa6c1960/attachment.html>