<div><div dir="auto">Have you configured session affinity?</div></div><div dir="auto"><br></div><div dir="auto"><div><a href="https://cloud.google.com/load-balancing/docs/backend-service#session_affinity">https://cloud.google.com/load-balancing/docs/backend-service#session_affinity</a></div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Mar 26, 2019 at 6:54 PM Melvin Lasky <<a href="mailto:melvin.lasky@manhattan.edu">melvin.lasky@manhattan.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space">Hey everyone,<div><span class="m_-5012931849016760907Apple-tab-span" style="white-space:pre-wrap"> </span>We are very close to launching our SHIBBOLETH authentication on Google Kubernetes Engine. We are having a slight problem. Our session persistence is not working as it should.</div><div><br></div><div>You can go to a few services, and then try again, and eventually the login page will come up and you’ll have to login again. This happens in < 1 minute generally of just bouncing around. I set my time-outs to 8 hours, and a 2hour idle…</div><div><br></div><div>That didn’t fix it. I noticed this in the logs:</div><div><br></div><div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.901961)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing;2019-03-26 23:48:59,282 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa already bound to 10.12.1.1</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.901961)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-warn.log;dev;nothing;2019-03-26 23:48:59,282 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa already bound to 10.12.1.1</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.901961)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-process.log;dev;nothing;2019-03-26 23:48:59,291 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa already bound to 10.12.1.1</span></div><div style="margin:0px;font-stretch:normal;line-height:normal;font-family:"Andale Mono";color:rgb(47,255,18);background-color:rgba(0,0,0,0.901961)"><span style="font-variant-ligatures:no-common-ligatures">shib-idp;idp-warn.log;dev;nothing;2019-03-26 23:48:59,291 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa already bound to 10.12.1.1</span></div></div><div><br></div><div>Now as mentioned, we are using Google Kubernetes Engine. The 10.100.x.x is an internal google IP for the compute engine that’s running the cluster.</div><div><br></div><div>The 10.12.1.1 address must be coming from the pod, but the pod’s IP is 10.12.1.x (with x being a higher number than 1)</div><div><br></div><div>Anyhow, does anyone have any suggestions on how we can resolve this issue? </div><div><br></div><div>Thanks for all your help!</div><div>  <br><div>
<div><b style="font-size:14px;background-color:rgb(255,255,255);color:rgb(0,102,0);font-family:georgia,serif">Melvin Lasky</b></div><div><div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;font-size:14px;background-color:rgb(255,255,255)"><font color="#006600" face="georgia, serif"><span><i>Associate Director of Enterprise Architecture</i></span></font></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif"><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><span><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><br class="m_-5012931849016760907Apple-interchange-newline"><span><img src="cid:169bc889cf861756a951" style="width:170px;max-width:100%"></span><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif"><br class="m_-5012931849016760907Apple-interchange-newline"><br class="m_-5012931849016760907Apple-interchange-newline"><br class="m_-5012931849016760907Apple-interchange-newline">Riverdale, NY 10471</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif">Phone: 718-862-7410</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><a href="mailto:melvin.lasky@manhattan.edu" style="font-family:georgia,serif;color:rgb(6,88,181)" target="_blank">melvin.lasky@manhattan.edu</a></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font color="#006600" face="georgia, serif"><a href="http://www.manhattan.edu/" style="color:rgb(6,88,181)" target="_blank">www.manhattan.edu</a></font></div></div></span></span></span></span></span></font></div></div></div></div></div><div style="word-wrap:break-word;line-break:after-white-space"><div><div><div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif"><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><span><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><br></div><br class="m_-5012931849016760907Apple-interchange-newline" style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal"><br class="m_-5012931849016760907Apple-interchange-newline" style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal">
</span></span></span></span></span></font></div><font face="georgia, serif">
</font></div></div><br></div></div>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div></div>