Sorry - I should have been clearer: the parallel with your situation is
that it's a tomcat produced error, indicating that access to the IdP
servlet is being denied. If you do google for
tomcat "HTTP Status 408 - The time allowed for the login process has
you'll find several similar posts about tomcat and other products which
use tomcat. Another example (with input from a tomcat developer) is
Again, this is using 30 mins + between login and access. It's to do with
the JSESSIN cookie lifetime used to associate the login credentials with
a tomcat session, apparently, so if that's not being set in IE, you'd
see the behaviour you describe, I think.
Adrian Barker wrote:
> The problem on the 'mail-archives.apache.org' page was that the person
> waited 30 minutes before authenticating, then received a time-out
> message when using IE but a different message when using Firefox. The IE
> problem that we have is different - we immediately see the time-out
> message. We do use jsp for the authentication page, but it's not clear
> why there is a problem with IE but not with Firefox.
> Adrian Barker.
> Simon McLeish wrote:
>> Hi Adrian,
>> I suspect this is a tomcat problem not a Shibboleth problem - exactly
>> the same question has come up in a non-Shib context at
>> [log in to unmask]" target="_blank">http:[log in to unmask]
>> (though no helpful answer). But you might find the tomcat logs useful
>> for diagnosis. If you've changed your tomcat configuration recently (or
>> apache/mod_jk, if that's your current architecture), that might be the
>> source of the problem.
>> Adrian Barker wrote:
>>> Is anyone having problems accessing Shibboleth resources using IE ? I
>>> can access various Shibboleth resources via our IdP using Firefox, but
>>> using IE, either the error:
>>> HTTP Status 408 - The time allowed for the login process has been exceeded
>>> is returned, or the IdP login page. This is with the current version of
>>> IE 6.
>> Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm
Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm