On Fri, 11 Dec 2009, Dominic Benson wrote:
> We're having issues without using EZproxy.
(If it wasn't clear, when I mentioned "proxy" I didn't mean EZProxy, I
meant a general Internet proxy for web traffic from campus).
> Our IdP authenticates when I'm off campus, but behaves exactly as you
> describe on campus. The explanation given is:
>
> "The problem was previously being caused by the load balancing
> configuration. Node (server) A's Shibboleth login was redirecting to
> node B's Shibboleth login upon a Shibboleth access attempt, batting the
> login attempts back and forth. However, due to further testing, there is
> only one node serving Shibboleth requests at the moment, so if you are
> still experiencing the problem, it will almost certainly be a caching
> issue."
>
> I'm still getting your problem today -- haven't heard if our web cache
> has been cleared yet.
Our web proxy does not cache on-disk, although it probably does in memory
for a while at least. I can switch between proxies at will and still get
the same issue. I suspect there is still some infelicity involving their
load balancer setup.
Thanks for the feedback,
Jethro.
>
> Kind regards,
> Dom
> --
> [log in to unmask]
> Electronic Resources Librarian
> Brunel University Library, Uxbridge, Middlesex, UK, UB8 3PH
> Tel: +44(0)1895 266143; fax: +44(0)1895 269741
>
> -----Original Message-----
> From: Discussion list for Shibboleth developments
> [mailto:[log in to unmask]] On Behalf Of Jethro R Binks
> Sent: 11 December 2009 11:45
> To: [log in to unmask]
> Subject: [JISC-SHIBBOLETH] dawsonera issues
>
> Another day, another question.
>
> Anyone heard of issues with dawsonera? Specifically, when accessing via
> a
> proxy,
>
> They claim to have performed an upgrade:
>
> "As part of the continuous improvement to the Dawsonera platform we will
>
> be upgrading the Shibboleth component to support the Shibboleth 2
> protocol.
>
> This will involve a change to the federation metadata (attached). The
> metadata will be updated at your federation at 6pm on 3rd December 2009.
> "
>
> Since 3rd December, when we select our site from their WAYF and login,
> we
> get redirected back to the WAYF again.
>
> Testing by bypassing proxy, after WAYF connection and local IdP login
> one
> is directed to a home page where there is a "Login to reader portal"
> option, "enter your insitutional username and password", and clicking
> that
> takes you straight to an accept terms and conditions page, and success
> thereafter.
>
> I note that their site is being served through a load balancer
> 93.91.19.147 isplb03-aux1.semantico.net. I wonder if the fact that we
> are
> connecting to it through proxy is giving some issue. Does any of this
> ring any bells with anyone? I've have pretty much run out of avenues to
>
> investigate.
>
> Jethro.
>
> . . . . . . . . . . . . . . . . . . . . . . . .
> .
> Jethro R Binks
> Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK
>
. . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks
Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK
|