lazy sessions and .htaccess

[Bill Tantzen]

Scott, Peter,

Right on -- the protected endpoints in my application do consult the SP
when needed (with or without lazy sessions), so that is another way to
accomplish what I need.

Yes, I realize that .htaccess introduces some inefficiencies but my goal is
to be able to quickly respond to spam, etc in what needs to be an
unprotected endpoint without restarting apache and interrupting active
users (moving those directives to the main configuration periodically).

Thanks for all you help everybody -- it is appreciated!
~~ Bill

On Wed, Dec 18, 2019 at 9:54 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 12/18/19, 9:42 AM, "users on behalf of Bill Tantzen" <
> users-bounces at shibboleth.net on behalf of tantz001 at umn.edu> wrote:
>
> > I am also curious about what lazy sessions actually do
>
> The self-invented term simply refers to content that does not require a
> session but consumes data from one if it exists so the SP has to know to
> process the requests in a different way than an active content rule. It
> cannot do anything useful unless something else causes the user to be
> logged in when that's necessary, and the use of them is tied into the
> nature of the application/content and how it's integrated with the SP.
>
> > my application seems to work fine without them!  What is the upside to
> using them when they seem to do nothing!
>
> They simply ensure the SP will process and attach user data to requests
> for the content when a session exists and ignore the requests if no session
> exists.
>
> As Peter said, using them with no application doing explicit redirects to
> cause a login and/or no "active" session rules in place for some related
> content by definition means the SP is never actually used and should just
> be removed.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Human wheels spin round and round
While the clock keeps the pace... -- John Mellencamp
________________________________________________________________
Bill Tantzen    University of Minnesota Libraries
612-626-9949 (U of M)    612-325-1777 (cell)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191218/78f46d9a/attachment.html>