Extremely slow anonymous access to a Confluence when Crowd SSO session time out.

[Suwon Jang]

When anonymous accessing to a Confluence the response time slows down extremely. It only occurs Crowd integration w/ SSO and login session is time out. A user never logged on or logged out explicitly doesn't suffer this problem.

Reproduction process:

1. Set confluence integrated w/ Crowd and make it SSO(editing seraph-config.xml and add crowd.properties)

2. Log-on to confluence.

3. Wait until crowd session timed out or make the user session expired using Crowd Console administration menu.

4. Now the user shows logged out. But he or she has still 'crowd.token_key' cookie in his or her browser storage.

5. Access to a confluence slows down extremely. (When logged in, it is about 100~200 ms, but in this case about 20s!)

Could you confirm this bug or any resolution for this problem? I've already dig documentations and web documents.

[David Mason]

This is caused by a bug in Confluence/Crowd. I've raised this at https://jira.atlassian.com/browse/CONF-26124.

Please vote on the issue if you would like it fixed, and add yourself as a watcher to keep track of its progress.

Regards,

David