Perl 6 - the future is here, just unevenly distributed

IRC log for #shibboleth, 2017-10-11

| Channels | #shibboleth index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
01:55 ilbot3 joined ##shibboleth
13:01 Es0teric joined ##shibboleth
13:14 Es0teric joined ##shibboleth
13:20 almost_there_ joined ##shibboleth
13:22 almost_there__ joined ##shibboleth
16:36 JuanDaugherty joined ##shibboleth
16:43 JuanDaugherty joined ##shibboleth
17:24 almost_there__ Hi all, I posted a question here a few days ago. I didn't see any suggestions here, but since this channel os logged, I figured I'd provide what worked for my situation. It turned out that since my SP was sitting behind a load balancer which has multiple hosts participating in the load balancer. After setting the native.logger and shibd.logger to do DEBUG logging, I saw that in /var/log/shibboleth-www/native_warn.log was indicating
17:24 almost_there__ "shib_check_user: client address mismatch" for virtually every session. I found this mailing list which detailed something very similar:  http://shibboleth.net/pipermail/users/2015-July/022588.html  He provided the solution as adding:  consistentAddress="false"  into the Sessions element of shibboleth2.xml. A restart of shibd and apache (and reverting DEBUG logging) had things working nicely.
17:48 JuanDaugherty joined ##shibboleth
17:56 pdurbin almost_there__: nice, thanks for following up
17:59 almost_there__ You got it! I always like to give back what I figure out when it's not explicitly documented.
19:16 cyberlard joined ##shibboleth
19:31 pdurbin almost_there__: is there a good way to document it? Could you make a pull request or whatever? Add to their wiki?
19:34 almost_there__ Documentation within the troubleshooting part of the wiki would probably be a good place to start.
22:05 pdurbin joined ##shibboleth
22:06 pdurbin almost_there__: yeah

| Channels | #shibboleth index | Today | | Search | Google Search | Plain-Text | summary