Shibboleth IdP plugin release - JDBC StorageService
Cantor, Scott
cantor.2 at osu.edu
Tue Jun 14 15:31:06 UTC 2022
The Shibboleth Project has released a new plugin for the IdP software that replaces the built-in but now deprecated Hibernate/JPA-based storage option with a JDBC-based implementation.
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2989096970/JDBCStorageService
This plugin is a drop in replacement for the JPA version, same database schema and essentially similar configuration (docs describe how to switch). Due to reliability challenges and the lack of appropriately signed Java artifacts for Hibernate, we will be removing the original code in the next major IdP release (V5) sometime next year.
We are making the replacement available now so people can move to it ahead of time (and help find any bugs so we can get it into shape). It also features control over the SQL for special cases and includes internal locking at the code level to reduce contention at least within a particular server node in a cluster in the hopes that it will reduce the constant "deadlocks that aren't actually deadlocks" caused by modern database mis-design.
We hope it will be more reliable (better performance is not the goal, stability is), but that locking is optional and not on by default.
Bugs can be reported against the JJDBC project.
Enjoy,
-- Scott
More information about the announce
mailing list