<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hey,
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>Maybe you need to turn idp.session.consistentAddress to false :</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span><a href="https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationConfiguration" class="">https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationConfiguration</a></div>
<div class=""><br class="">
</div>
<div class="">Youssef</div>
<div class="">---------------------------<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 27 Mar 2019, at 00:54, Melvin Lasky <<a href="mailto:melvin.lasky@manhattan.edu" class="">melvin.lasky@manhattan.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hey everyone,
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>We are very close to launching our SHIBBOLETH authentication on Google Kubernetes Engine. We are having a slight problem. Our session persistence is not working as it should.</div>
<div class=""><br class="">
</div>
<div class="">You can go to a few services, and then try again, and eventually the login page will come up and you’ll have to login again. This happens in < 1 minute generally of just bouncing around. I set my time-outs to 8 hours, and a 2hour idle…</div>
<div class=""><br class="">
</div>
<div class="">That didn’t fix it. I noticed this in the logs:</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.901961);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">shib-idp;idp-process.log;dev;nothing;2019-03-26 23:48:59,282 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa
already bound to 10.12.1.1</span></div>
<div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.901961);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">shib-idp;idp-warn.log;dev;nothing;2019-03-26 23:48:59,282 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa
already bound to 10.12.1.1</span></div>
<div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.901961);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">shib-idp;idp-process.log;dev;nothing;2019-03-26 23:48:59,291 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa
already bound to 10.12.1.1</span></div>
<div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Andale Mono"; color: rgb(47, 255, 18); background-color: rgba(0, 0, 0, 0.901961);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">shib-idp;idp-warn.log;dev;nothing;2019-03-26 23:48:59,291 - WARN [net.shibboleth.idp.session.AbstractIdPSession:374] - Client address is 10.100.x.x but session fdfdf782f30382fa94db9927e745292eb15c039c816f312bebc484d5707181aa
already bound to 10.12.1.1</span></div>
</div>
<div class=""><br class="">
</div>
<div class="">Now as mentioned, we are using Google Kubernetes Engine. The 10.100.x.x is an internal google IP for the compute engine that’s running the cluster.</div>
<div class=""><br class="">
</div>
<div class="">The 10.12.1.1 address must be coming from the pod, but the pod’s IP is 10.12.1.x (with x being a higher number than 1)</div>
<div class=""><br class="">
</div>
<div class="">Anyhow, does anyone have any suggestions on how we can resolve this issue? </div>
<div class=""><br class="">
</div>
<div class="">Thanks for all your help!</div>
<div class=""> <br class="">
<div class="">
<div class=""><b style="font-size: 14px; background-color: rgb(255, 255, 255); color: rgb(0, 102, 0); font-family: georgia, serif;" class="">Melvin Lasky</b></div>
<div class="">
<div style="font-family: Helvetica; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<font color="#006600" face="georgia, serif" class=""><span style="caret-color: rgb(0, 102, 0);" class=""><i class="">Associate Director of Enterprise Architecture</i></span></font></div>
<div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<font face="georgia, serif" class=""><span style="color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: normal; font-variant-position: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span class=""><span class=""><span style="color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span class=""><br class="Apple-interchange-newline">
<span class=""><span id="cid:7B5B252C-AE36-47D6-A49C-64373517FC74"><email_logo.jpg></span></span>
<div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; font-family: Helvetica; font-size: 12px;" class="">
<div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<font face="georgia, serif" class=""><br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
Riverdale, NY 10471</font></div>
<div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<font face="georgia, serif" class="">Phone: 718-862-7410</font></div>
<div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<a href="mailto:melvin.lasky@manhattan.edu" target="_blank" style="font-family: georgia, serif; color: rgb(6, 88, 181);" class="">melvin.lasky@manhattan.edu</a></div>
<div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class="">
<font color="#006600" face="georgia, serif" class=""><a href="http://www.manhattan.edu/" target="_blank" style="color: rgb(6, 88, 181);" class="">www.manhattan.edu</a></font></div>
</div>
<div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; font-family: Helvetica; font-size: 12px;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline" style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal;">
<br class="Apple-interchange-newline" style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal;">
</span></span></span></span></span></font></div>
<font face="georgia, serif" class=""></font></div>
</div>
<br class="">
</div>
</div>
-- <br class="">
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" class="">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>