I have run some very quick tests and it does appear to be down to the
cookie settings.
In IE if the privacy setting is at *high* or above you get the 408
error, which would appear to be in line with Simon's suggestion.
Regards
Richard Annett
Federated Identity Specialist
Eduserv
innovative technology services
________________________________
[log in to unmask]
tel: +44 (0)1225 474373
fax: +44 (0)1225 474332
http://www.eduserv.org.uk/athens/
________________________________
Eduserv Athens is a service of Eduserv Technologies Limited
-----Original Message-----
From: Discussion list for Shibboleth developments
[mailto:[log in to unmask]] On Behalf Of Simon McLeish
Sent: 08 August 2007 12:18
To: [log in to unmask]
Subject: LA (Re: Problems accessing Shibboleth resources using Internet
Explorer)
Hi Adrian,
Sorry - I should have been clearer: the parallel with your situation is
that it's a tomcat produced error, indicating that access to the IdP
servlet is being denied. If you do google for
tomcat "HTTP Status 408 - The time allowed for the login process has
been exceeded"
you'll find several similar posts about tomcat and other products which
use tomcat. Another example (with input from a tomcat developer) is
http://archives.devshed.com/forums/java-118/when-does-408-happen-1619437
.html.
Again, this is using 30 mins + between login and access. It's to do with
the JSESSIN cookie lifetime used to associate the login credentials with
a tomcat session, apparently, so if that's not being set in IE, you'd
see the behaviour you describe, I think.
Simon
Adrian Barker wrote:
> The problem on the 'mail-archives.apache.org' page was that the person
> waited 30 minutes before authenticating, then received a time-out
> message when using IE but a different message when using Firefox. The
IE
> problem that we have is different - we immediately see the time-out
> message. We do use jsp for the authentication page, but it's not clear
> why there is a problem with IE but not with Firefox.
>
>
> Adrian Barker.
>
>
>
> Simon McLeish wrote:
>
>> Hi Adrian,
>>
>> I suspect this is a tomcat problem not a Shibboleth problem - exactly
>> the same question has come up in a non-Shib context at
>>
http://mail-archives.apache.org/mod_mbox/tomcat-users/200612.mbox/%3c464
[log in to unmask]
>> (though no helpful answer). But you might find the tomcat logs useful
>> for diagnosis. If you've changed your tomcat configuration recently
(or
>> apache/mod_jk, if that's your current architecture), that might be
the
>> source of the problem.
>>
>> Cheers,
>> Simon
>>
>
>
>> Adrian Barker wrote:
>>
>>> Is anyone having problems accessing Shibboleth resources using IE ?
I
>>> can access various Shibboleth resources via our IdP using Firefox,
but
>>> using IE, either the error:
>>> HTTP Status 408 - The time allowed for the login process has been
exceeded
>>>
>>> is returned, or the IdP login page. This is with the current version
of
>>> IE 6.
>>>
>>>
>>>
>>>
>> Please access the attached hyperlink for an important electronic
communications disclaimer:
http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm
>>
>
>
>
Please access the attached hyperlink for an important electronic
communications disclaimer:
http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm
Unless otherwise agreed expressly in writing by a senior manager of
Eduserv, this communication is to be treated as confidential and the
information in it may not be used or disclosed except for the purpose
for which it has been sent.
If you have reason to believe that you are not the intended recipient
of this communication, please contact the sender immediately.
No employee or agent is authorised to enter into any binding agreement
or contract on behalf of Eduserv or Eduserv Technologies Ltd., unless
that agreement is subsequently confirmed by the conclusion of a written
contract or the issue of a purchase order.
Eduserv (Limited by Guarantee) – company number 3763109 - and
Eduserv Technologies Ltd – company number – 4256630 - are both
companies incorporated in England and Wales and have their registered
offices at Queen Anne House, 11 Charlotte Street, Bath, BA1 2NE.
|