SLO Problems

Darren Boss darren.boss at
Tue Apr 16 13:07:39 EDT 2019

So I think I tracked it down to Jetty configuration. I'm using the Unicon
shibboleth-idp-dockerized image although I rebuild it and I do make some
minor tweaks as a layer on top of their image.

I think that's the culprit and that last addRule can be removed. If it
works I'll create a PR to their project.

On Tue, Apr 16, 2019 at 11:19 AM Cantor, Scott <cantor.2 at> wrote:

> On 4/16/19, 9:43 AM, "users on behalf of Darren Boss" <
> users-bounces at on behalf of darren.boss at>
> wrote:
> > It does look like my problem might be related to running under
> Kubernetes, specifically that http headers are being set
> > by the nginx proxy.
> That doesn't inherently mean the headers are in fact correctly usable out
> of the box, there still might be a mistake in our understanding.
> You should NOT need to alter the headers to make logout work, and I have
> never had to do so in any testing scenarios I've attempted. So either my
> testing is artificial and doesn't match a real world issue in some way, or
> people are mistaken somewhere about what Chrome is really saying.
> -- Scott
> --
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to
> users-unsubscribe at


*Darren Boss*
*Senior Programmer/Analyst*
*Programmeur-analyste principal*
*darren.boss at <darren.boss at>*
*(o) 416.228.1234 x *230
*(c) 919.525.0083*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list