OWA Timeout V2

There are a few scenarios where a user will be presented with an "access policy already started" message and the "click here to start a new session" link will cause a redirect loop. This generally happens network connections are lost for a given period of time, so the apm session expires prior to Exchange saying that the network connection fails.

With this irule

HTTP::respond 440 "Set-Cookie" cookie_sessionid "Set-Cookie" cookie_cadata

mimics what an exchange owa node would return should the connection timeout naturally, which causes the owa app to refresh the main page, which kicks the user out to the login page.

Keep in mind that I am still developing this for our environment, and it may not be necessary for everybody. But we have numerous individuals complaining of this issue, and we need to fix it.

It appears that my copy and paste got a little screwy in my prior post.

when ACCESS_ACL_ALLOWED {
        set apm_mrhsession [HTTP::cookie value "MRHSession"]
        if { [table lookup $apm_mrhsession] == "EXCHANGE_LOGOUT" && [ACCESS::session exists]} {
           ACCESS::session remove
           table delete $apm_mrhsession
           log local0. "$apm_mrhsession: Session for [IP::client_addr] expired"

        }
}

when HTTP_REQUEST {

     if { [string tolower [HTTP::uri]] starts_with "/owa/" } {
            if { [HTTP::cookie exists "MRHSession"] && ![ACCESS::session exists]} {
            if { [string tolower [HTTP::uri]] != "/owa/"  && [string tolower [HTTP::uri]] != "/owa/" } {
                 set cookie_sessionid [format "sessionid=null; path=/; Expires=Thurs, 01-Jan-1970 00:00:00 GMT;"]
                 set cookie_cadata [format "cadata=null; path=/; Expires=Thurs, 01-Jan-1970 00:00:00 GMT;"]
                 HTTP::respond 440 "Set-Cookie" cookie_sessionid "Set-Cookie" cookie_cadata
            } else {
                 log local0. "HTTP uri - not redirected: [HTTP::uri]"
            }

     } }
     set user_inactive 0
     if { [HTTP::header exists "X-UserActivity"] && [HTTP::header "X-UserActivity"] == 0 } {
        set mrhsession [HTTP::cookie value "MRHSession"]
        set user_inactive 1
        return
     }
}

when HTTP_RESPONSE {
   if { $user_inactive && [HTTP::status] == 440 } {
        table set $mrhsession "EXCHANGE_LOGOUT"
        return
   }
}