[shib_auth] cookie handing for anonymous users

[Kristof Bajnok]

Hi Christian,

On 04/03/2013 03:10 AM, Mchugh, Christian wrote:
> It tells me that the cookie is for a shibboleth session:
> shib_auth_rolecache|a:3:{i:3;s:13:"administrator";i:1;s:14:"anonymous user";i:2;s:18:"authenticated user";}
> 
> 
> Since the user has not yet logged in, I don't see any reason for it to set a cookie. Is this a bug, or can anything be done about it?

Indeed, the rolecache is only relevant when there is an authenticated
session. Please file a RFE so that I'll remember fixing it.

Kristof