As I understand it, if you have a requirement for a specific factor on an application server, and the user is authenticated, but they don't have the factor, you'll see that error when they get redirected back to the login server.
So if you have a user that's logged in as a friend (so they just have the factor "friend"), but you have an application that has a CoSignRequireFactor for your Kerberos realm name, then when they visit your app they'll get sent back for more authentication, and you'll see "we broke out early" in the error_log. Steve. -----Original Message----- From: gavin.g...@ed.ac.uk [mailto:gavin.g...@ed.ac.uk] Sent: 03 September 2015 12:04 To: cosign-discuss@lists.sourceforge.net Subject: [Cosign-discuss] second factor issues We have been running a cosign service with a second factor in our test environment and some clients are reporting the following error in their apache logs: mod_cosign: netcheck_cookie: we broke out early Could anyone clarify what this means and if we need to be concerned. we are running cosign 3.2.0 many thanks, Gavin Gray University of Edinburgh IT Infrastructure Division Information Services James Clerk Maxwell Building The Kings Buildings Peter Guthrie Tait Road Edinburgh EH9 3FD UK tel +44 (0)131 650 5987 email gavin.g...@ed.ac.uk -- The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336. ------------------------------------------------------------------------------ Monitor Your Dynamic Infrastructure at Any Scale With Datadog! Get real-time metrics from all of your servers, apps and tools in one place. SourceForge users - Click here to start your Free Trial of Datadog now! http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 _______________________________________________ Cosign-discuss mailing list Cosign-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cosign-discuss ------------------------------------------------------------------------------ Monitor Your Dynamic Infrastructure at Any Scale With Datadog! Get real-time metrics from all of your servers, apps and tools in one place. SourceForge users - Click here to start your Free Trial of Datadog now! http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 _______________________________________________ Cosign-discuss mailing list Cosign-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cosign-discuss
