<div style="font-family: Helvetica; font-size: 17px; ">Scott:<div><br></div><div>Just did a test, hope this might help shine some lights on.</div><div><br></div><div>I put in these configuration on glassfish-web.xml because without it. When sending multiple request, some request is returned back (200 code but with an empty response body). My server code never see these requests. And all these happens when there is a valid shibboleth session. However, turning off these glassfish option, then the previous problem is gone. </div><div><br></div><div>Since I have a hybrid app (i.e., some of them use alternative authentication mechanism) and some use Shibboleth. And this is a GWT app, so there is only one path, so I am presented with a conundrum (:-)). I can circumvent the problem by splitting my apps, but want to ask if your guys have known something... </div><div><br></div><div><p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><session-<span style="text-decoration: underline">config</span>></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span><session-manager persistence-type="replicated"></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span><manager-properties></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span><property name="relaxCacheVersionSemantics" value="true" /></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span></manager-properties></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span></session-manager></p>
<p style="margin: 0px; font-size: 14px; font-family: Monaco; color: rgb(79, 118, 203); "><span class="Apple-tab-span" style="white-space:pre"> </span></session-<span style="text-decoration: underline">config</span>> </p></div></div>
<div><div><br></div><div>-- </div><div>Xiaoshu Wang</div><div>Sent with <a href="http://www.sparrowmailapp.com/?sig">Sparrow</a></div><div><br></div></div>
<p style="color: #A0A0A8;">On Tuesday, September 3, 2013 at 9:23 PM, Cantor, Scott wrote:</p>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div><div><div>On 9/3/13 9:01 PM, "Xiaoshu Wang" <<a href="mailto:xiaoshuw@email.unc.edu">xiaoshuw@email.unc.edu</a>> wrote:</div><blockquote type="cite"><div><div><br></div><div>The problem takes place when there is no valid Shibboleth session. I</div><div>thought in that case, Shibboleth should just hand out what it gets to</div><div>Glassfish. But apparently it does not. I have done the control.</div></div></blockquote><div><br></div><div>There can be *no* forced session establishment if you don't have a setting</div><div>requiring one. It simply won't physically do that, so something else is</div><div>causing it, and presumably it must be something that specifically is</div><div>reacting to headers in some way.</div><div><br></div><blockquote type="cite"><div><div>It is the same application run in each of these setting. So, it shows</div><div>that somehow ShibUserHeader has interfered. Otherwise, it shouldn't give</div><div>me the above result, right?</div></div></blockquote><div><br></div><div>That all assumes nothing else in evidence. Since I know that's not what</div><div>the code does, the logical conclusion is that there's an external factor</div><div>involved.</div><div><br></div><div>-- Scott</div><div><br></div><div><br></div><div>--</div><div>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></div></div></div></span>
</blockquote>
<div>
<br>
</div>