Manually force Shibboleth SP to expire/invalidate all sessions

[Tom Noonan]

>I'd still be interested in your comments about this approach:
> Have you considered using a storage backend that does support
> clustering and fail-over properly? Memcache in itself has no
> replication, andrepcache seems to be a dead end. Have you tried
> replacing your memcached instances with Couchbase Server?
> https://www.couchbase.com/memcached

I guess I don't understand the approach and therefore the question?  I'm
using shibd and Apache as an authenticated reverse proxy.  My app fully
supports clustering and doesn't need sticky sessions.  I kicked around
using a Postgres DB for SP clustering per
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPClustering but
rejected it as it seems strongly discouraged and we believed the latency
penalty hitting a external DB would be too high.  It sounds like this is
all going to change in V3 here really soon, so I think I'm going to focus
on understanding the V3 changes and how they'll impact me.  I have a
solution I can implement for V2.  Thanks.

--Tom Noonan II

On Wed, Feb 21, 2018 at 10:13 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Tom Noonan <tom at joinroot.com> [2018-02-21 15:45]:
> > I'm also unfamiliar with the Shibboleth consortium and how to join it
>
> https://www.shibboleth.net/consortium/support/
>
> Of course becoming a (paying, that's the whole point) consortium
> member is no guarantee to get something implemented.
> (You can always contribute code, of course.)
>
> I'd still be interested in your comments about this approach:
>
> > > Have you considered using a storage backend that does support
> > > clustering and fail-over properly? Memcache in itself has no
> > > replication, andrepcache seems to be a dead end. Have you tried
> > > replacing your memcached instances with Couchbase Server?
> > > https://www.couchbase.com/memcached
>
> -peter
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180221/6942a8fb/attachment.html>