AJP Users Out There

Cameron Kerr cameron.kerr at otago.ac.nz
Tue Sep 18 21:23:33 EDT 2018

I would have thought ‘timeout’ would be cleaner…. What are the semantics of ‘retry’ with regard to things like POST and replay detection?

That said, I’m from New Zealand, and our instructions (Tuakiri Federation) is based very much on the AAF documentation. I’ve seen no obvious problems from using retry=5 (at least, none that I could account for) in the several years our IdP has run.

Hope that helps,

From: users <users-bounces at shibboleth.net> On Behalf Of Hugo Slavia
Sent: Wednesday, 19 September 2018 1:16 PM
To: Shib Users <users at shibboleth.net>
Subject: AJP Users Out There

For the AJP users out there -- with Apache/Tomcat -- do you have a preference between 'retry' or 'timeout' in the AJP configuration?

For other services, we generally use the timeout (without retry) -- I saw an example by the Australian Federation with 'retry' - http://wiki.aaf.edu.au/tech-info/idpconf

ProxyPass /idp ajp://localhost:8009/idp retry=5

ProxyPass /idp ajp://localhost:8009/idp timeout=600
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180919/b41af3eb/attachment.html>

More information about the users mailing list