[shib_auth] Mixing sessions (Was: Re: class registry in drupal 7 conflicting with shib sessions)

[Mike Cammilleri]

I'm attempting to reproduce the problem but so far it hasn't reared its 
ugly head since yesterday. My situation seems to differ from Andy's in 
that we saw the problem without the memcache module installed, however 
I'm clearly having issues with D7 and its caching behavior (or a 
module's caching behavior).

We do use the Admin Menu module like Andy does and my student did see my 
user name after he logged in on the admin menu toolbar, so could just be 
a display issue, but still very misleading.




On 08/28/13 12:55, Kristof Bajnok wrote:
> On 2013-08-28 17:47, Mike Cammilleri wrote:
>> We just experienced the symptom he describes. I had a student call me
>> yesterday afternoon to tell me that when he logged in as himself, drupal
>> was displaying MY username. I did currently have a shib session open.
>
> Mike, if you could tell, was it only _displaying_ your username or was
> the student actually possessing the rights you have? I really hope that
> it was the former, although it is still embarrassing, no doubt.
>
> We've already got a some reports similar to this
> (https://drupal.org/node/1949102), and I really want to fix it for good,
> but I need more info.
>
> Those of you, who had mis-identifying issues, could you describe your
> setup and the type of error you got (see above)?
>
> Kristof
>
> _______________________________________________
> shib_auth mailing list
> shib_auth at listserv.niif.hu
> https://listserv.niif.hu/mailman/listinfo/shib_auth
>