Doug,

Thanks for verifying.  A ways back I had my authorization refresh interval
set to 1 and I was having to relog every minute.  The refresh would wiped
out my valid authorizatons.  Does not appear to be the issue here.

Once you log in all subsequent requests use the cfauth cookie to identify
who you are and to authenticate you with SM.

I'd throw some log entries into cfa_isauthorized to determine why it is
returning false.  Is it that no cookie has been passed in or is it that the
cookie cannot be validated.

HTH,
Mike

-----Original Message-----
From: Doug Cain - OCF [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 10, 2001 6:43 AM
To: Spectra-Talk
Subject: RE: Siteminder loggs me out occasionally


Mike,

I have tried a couple of things,

I upped the cache settings from

10,60,120

to 120 for all.

I made sure I have all the 1.5 patches as of april including the siteminder
sp1. The siteminder registry updatesyncdelay setting is 0 as recommended
when connecting to an sql datasource (on a separate machine).

Session timeouts are set:

<cfa_applicationInitialize
        name="#request.ocf.application#"
        mode="#request.ocf.mode#"
        sessionManagement="true"
    sessiontimeout="30">

and the only security call is in application.cfm;

        <cfa_secure
                username="#username#"
                password="#password#"
                authenticationURL = "#request.ocf.rooturl#login.cfm"
                storageType="cookie"
                securityContext = "sc1"
                r_stUserProfile="request.stUser"
                R_BResult = "request.loginSuccess"
                datasource="#request.cfa.datasource.dsn#">

The situation has improved slightly but I still get logged out every now and
then with no repeatable pattern.

Is there anyway of debugging / examining the siteminder / cf logs to see why
this is happening?

Thanks,

Doug

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 09 May 2001 17:52
To: Spectra-Talk
Subject: RE: Siteminder loggs me out occasionally


Doug,

Can you try this?

Take a look at your refresh intervals for Authorization cache and Coldfusion
cache on the Adv. Security Settings page.

What are they?

Bump them up to 120 and restart the services.

I had a issue like yours awhile back.  Let me know if this resolves it for
you.

Mike

-----Original Message-----
From: Doug Cain - OCF [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 09, 2001 6:57 AM
To: Spectra-Talk
Subject: Siteminder loggs me out occasionally


Has any one come across siteminder deciding to log them out when it feels
like it?

Sometimes it does it after a few moments, sometimes minutes sometimes not.

I am using the cfa_secure method as a single entry point in application.cfm
and it
doesn't seem to be a repeatable problem. Infact it all works fine on the
development
machines but I have this problem on my production ones (all cf 4.5 sp2,
spectra 1.5 on win 2000).

I have left the timeouts to default values (30 minutes) but the only thing I
have come up
with is some sort of timing issue with the policy / userstore on the
separate spl 2000
machines but that's just a guess.

Anyone have any ideas where I should start looking?

Thanks

Doug Cain
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/spectra_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to