<div dir="ltr"><div>Nope, the messages are actually on the new IP. My first thought was DNS TTL, but the old IP was actually down as I had stopped the jail. So I shouldn't be able to see server if that was so. <br><br></div>The new IP gets the request to /profile/SAML2/SOAP/ArtifactResolution normally, but for some reason doesn't know about the artifact being requested. Query, the artifact value is completely opaque, right? <br><div><br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 24, 2014 at 5:38 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 11/24/14, 3:30 PM, "Athanasios Douitsis" <<a href="mailto:aduitsis@gmail.com">aduitsis@gmail.com</a>> wrote:<br>
><br>
>The host system is a FreeBSD 9 jail, and I simply copied the jail to<br>
>another machine and changed its IP address.<br>
><br>
>After stopping the initial jail, I changed the IdP A record to point to<br>
>the new IP, I started the second jail with the new IP and started seeing<br>
>these messages for a couple of minutes. I reverted back to the original<br>
>jail as I hadn't expected to run into this kind of trouble.<br>
<br>
</span>If the messages were on the old IP, the cause is DNS caching bugs. If<br>
they're on the new IP, then the only explanation is that clients are<br>
getting artifacts from the old one.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">Athanasios Douitsis<br><br><br></div>
</div>