Thanks for verifying. A ways back I had my authorization refresh interval set to 1 and I was having to relog every minute. The refresh would wiped out my valid authorizatons. Does not appear to be the issue here.

Once you log in all subsequent requests use the cfauth cookie to identify who you are and to authenticate you with SM.

I'd throw some log entries into cfa_isauthorized to determine why it is returning false. Is it that no cookie has been passed in or is it that the cookie cannot be validated.

HTH, Mike

-----Original Message----- From: Doug Cain - OCF [mailto:doug.cain@courseware-factory.com] Sent: Thursday, May 10, 2001 6:43 AM To: Spectra-Talk Subject: RE: Siteminder loggs me out occasionally

Mike,

I have tried a couple of things,

I upped the cache settings from

10,60,120

to 120 for all.

I made sure I have all the 1.5 patches as of april including the siteminder sp1. The siteminder registry updatesyncdelay setting is 0 as recommended when connecting to an sql datasource (on a separate machine).

Session timeouts are set:

<cfa_applicationInitialize name="#request.ocf.application#" mode="#request.ocf.mode#" sessionManagement="true" sessiontimeout="30">

and the only security call is in application.cfm;

<cfa_secure username="#username#" password="#password#" authenticationURL = "#request.ocf.rooturl#login.cfm" storageType="cookie" securityContext = "sc1" r_stUserProfile="request.stUser" R_BResult = "request.loginSuccess" datasource="#request.cfa.datasource.dsn#">

The situation has improved slightly but I still get logged out every now and then with no repeatable pattern.

Is there anyway of debugging / examining the siteminder / cf logs to see why this is happening?

Thanks,

Doug

-----Original Message----- From: mcollins@macromedia.com [mailto:mcollins@macromedia.com] Sent: 09 May 2001 17:52 To: Spectra-Talk Subject: RE: Siteminder loggs me out occasionally

Doug,

Can you try this?

Take a look at your refresh intervals for Authorization cache and Coldfusion cache on the Adv. Security Settings page.

What are they?

Bump them up to 120 and restart the services.

I had a issue like yours awhile back. Let me know if this resolves it for you.

Mike

-----Original Message----- From: Doug Cain - OCF [mailto:doug.cain@courseware-factory.com] Sent: Wednesday, May 09, 2001 6:57 AM To: Spectra-Talk Subject: Siteminder loggs me out occasionally

Has any one come across siteminder deciding to log them out when it feels like it?

Sometimes it does it after a few moments, sometimes minutes sometimes not.

I am using the cfa_secure method as a single entry point in application.cfm and it doesn't seem to be a repeatable problem. Infact it all works fine on the development machines but I have this problem on my production ones (all cf 4.5 sp2, spectra 1.5 on win 2000).

I have left the timeouts to default values (30 minutes) but the only thing I have come up with is some sort of timing issue with the policy / userstore on the separate spl 2000 machines but that's just a guess.

Anyone have any ideas where I should start looking?

Thanks

Doug Cain ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm ------------------------------------------------------------------------------ To Unsubscribe visit http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/spectra_talk or send a message to spectra-talk-request@houseoffusion.com with 'unsubscribe' in the body.