Hello, my name is cookie. But what is my name ?

[Rémy]

Bonjour,

In the configuration of simpleSAMLphp config there are several variable for naming session / cookies

======= config.config.php

/*

* Option to override the default settings for the session cookie name

*/

'session.cookie.name' => 'SimpleSAMLSessionID',

/*

* Options to override the default settings for php sessions.

*/

'session.phpsession.cookiename'  => null,

/*

* Option to override the default settings for the auth token cookie

*/

'session.authtoken.cookiename' => 'SimpleSAMLAuthToken',

Which corresponds to the variable session.name  in the php.ini? (Or php_value session.name in Vhost for me.)

Which are involved in the problems of SimpleSAML_Error_NoState: NOSTATE ?

Is all I can get the same value?

[Olav Morken]

On Thu, Nov 14, 2013 at 08:16:31 -0800, R�my wrote:
> Bonjour,
>
>
> In the configuration of simpleSAMLphp config there are several variable for
> naming session / cookies
>
> ======= config.config.php
>
> /*
> * Option to override the default settings for the session cookie name
> */
> 'session.cookie.name' => 'SimpleSAMLSessionID',
>
> /*
> * Options to override the default settings for php sessions.
> */
> 'session.phpsession.cookiename' => null,
>
> /*
> * Option to override the default settings for the auth token cookie
> */
> 'session.authtoken.cookiename' => 'SimpleSAMLAuthToken',
>
>
> Which corresponds to the variable session.name in the php.ini? (Or
> php_value session.name in Vhost for me.)

session.phpsession.cookiename -- if it is left as NULL, whatever value
is set in 'session.name' will be used.

> Which are involved in the problems of SimpleSAML_Error_NoState: NOSTATE ?

Assuming that you are using PHP sessions, session.phpsession.cookiename
and session.authtoken.cookiename are used for the name of the cookies.
Other parameters can of course also affect the cookies set.

> Is all I can get the same value?

Not sure what you are asking here.


The best way to debug cookie issues is with a request logger. Log the
requests in your web browser, and look at the cookies sent and received
in various requests. Once you have identified where the cookie is wrong
or missing, you can determine why the browser isn't sending the correct
value in that location.

Best regards,
Olav Morken
UNINETT / Feide