Tag Mismatch Errors Since Moving To Ubuntu

[Ullfig, Roberto Alfredo]

So a person that only logs in every other month will always generate a tag mismatch in the log? The server no longer knows about that old key.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Wednesday, July 19, 2023 11:15 AM
To: Ullfig, Roberto Alfredo <rullfig at uic.edu>; Shib Users <users at shibboleth.net>
Subject: Re: Tag Mismatch Errors Since Moving To Ubuntu

> I mean the keystore holds 30 keys - doesn't that mean that the keys have an
> effective lifetime of 30 days? So 30 days from 7/3 everyone should be using
> the keys in the new keystore?

Apart from the clients that haven't accessed anything in that time frame at all and have data under an older key.

To be clear: don't do this (it's too late, I'm just pointing it out for the archive). That key has to be copied just like all the others.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230719/bb6dcd9d/attachment.htm>