Session initiation cookie flood

Ulf Seltmann ulf.seltmann at hmt-leipzig.de
Tue Sep 6 07:25:23 UTC 2022


Hi,

I have a XHR rich website behind an Shibboleth-SP proxy and recently i
noticed 502 bad gateway errors when i came back to a open tab after
quite a while.
Investigating the request chain i found that the proxy buffers where
too low, originating from too big headers. The final issue is tons of
"_opensaml_ss_req*" cookies - a new cookie created with each XHR reqest
- that seem to not expire.

Is there a way to set the expire time of those session initiation
cookies?

cheers
-- 
Ulf Seltmann
System-Administrator

Hochschule für Musik und Theater Leipzig
IT-Dienste
Grassistraße 8 | 04107 Leipzig
Tel.: +49 341 2144 681
ulf.seltmann at hmt-leipzig.de | www.hmt-leipzig.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6554 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20220906/832ad58a/attachment.p7s>


More information about the users mailing list