JSESSIONID issues, Stale Session. (SameSite issue?)

[Etan Weintraub]

Thanks, Scott. It does look like the web.xml was customized and didn't get 
copied out properly on our last tomcat upgrade. We are working through it all 
now, but that was the tip we needed....hopefully once we have it out, our 
problems resolve.

-Etan E. Weintraub
IT Architect
Enterprise Authentication & Cloud Workspace
IT at Johns Hopkins
Johns Hopkins at Mt. Washington
5801 Smith Ave.
Davis Building Suite 3110B
Baltimore, MD 21209
E-mail: eweintra at jhmi.edu
Pronouns: he, him, his




-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, January 20, 2022 1:16 PM
To: Etan Weintraub <eweintra at jhmi.edu>; Shib Users <users at shibboleth.net>
Subject: Re: JSESSIONID issues, Stale Session. (SameSite issue?)


      External Email - Use Caution



>    We have those set in idp.properties:

And you installed the filter? That's not something the installer can do for 
you unless you've never customized web.xml.

>    We are still seeing the issue though, mostly with Firefox, which we also 
> seem
>    to have significant users with, but also with Edge and Chrome.

It's not the same issue or you don't have the filter installed.

-- Scott


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6666 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20220120/ce98e797/attachment.p7s>