Shibboleth SP error redux

[Cantor, Scott]

On 3/4/20, 3:06 PM, "users on behalf of Spencer Thomas" <users-bounces at shibboleth.net on behalf of Spencer.Thomas at ithaka.org> wrote:

> Adding consistentAddress has resolved the issue. The error message was not helpful to me in diagnosing the "root
> cause". If there was a message in a log saying something like "session rejected because IP changed" that would have
> pointed immediately to what I needed to address.

There is, in the other log. There are two processes, ergo there have to be two logs.

That isn't going to resolve the issue, as I said, it's going to happen any time a session has to be initiated from that resource. The configuration has to be broken.

The error was not because the IP addresses didn't match, that simply triggered the need for a session it couldn't satisfy.

-- Scott