Timeout errors happening regularly

[Dave Perry]

Scott

Assuming proxied authentication covers using 365 instead of LDAP to authenticate users, that is what I need to look at.

I found it mentioned here:
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500367/ReleaseNotes#5.2.0-(January-29,-2026)

Is this the correct thing to try next?

Thanks
Dave

_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
d.perry1 at yorksj.ac.uk<mailto:d.perry1 at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk/>

[cid:b5f53d72-ece2-4f59-b32f-27449393cbc1]

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Scott Cantor via users <users at shibboleth.net>
Sent: Monday, July 6, 2026 4:45 PM
To: Shib Users <users at shibboleth.net>
Cc: Scott Cantor <scott at restingparrotsoftware.com>
Subject: Re: Timeout errors happening regularly

Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.


On Jul 6, 2026, at 11:14 AM, Dave Perry via users <users at shibboleth.net> wrote:
>
> The Timeout error (represented by stale. in the messages.properties file) is happening so often now, our library are saying that students are reporting that the link doesn't work at all. This will be from on and off campus, so a mix of browsers and devices/setups.
>
> Is there any way of reducing this?

Do the tracing and cookie analysis to determine the actual cause I suppose.

A "link" is itself a red flag, but it would depend what the link has in it.

Others have encountered the fact that in 5.2+ you have to address SameSite via web.xml if you're impacted by that and I documented that in the release notes, but that only applies for the most part to proxied authentication.

-- Scott

--
For Consortium Member technical support, see https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C02%7Cd.perry1%40yorksj.ac.uk%7C749ed65ae40f4b0ddddc08dedb75de7d%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C639189496453397794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=sIxDF5OYc%2FY0NbSMjqzp5xBgLSUcfHmwfNPvbYs%2BpVg%3D&reserved=0<https://shibboleth.atlassian.net/wiki/x/ZYEpPw>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20260715/9e6f2d44/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 12155 bytes
Desc: image.png
URL: <http://shibboleth.net/pipermail/users/attachments/20260715/9e6f2d44/attachment.png>