[JIRA] Created: (SIDP-507) Cryptographic nameID is longer than key length that memcache can handle

[nsroy@uiowa.edu (JIRA)]

Cryptographic nameID is longer than key length that memcache can handle
-----------------------------------------------------------------------

                 Key: SIDP-507
                 URL: https://issues.shibboleth.net/jira/browse/SIDP-507
             Project: Shibboleth IdP 2 - Java
          Issue Type: Bug
          Components: Attribute Resolution
    Affects Versions: 2.3.3, 2.3.2, 2.3.1, 2.3.0
         Environment: Any that uses cryptographic nameID for stateless load balancing
            Reporter: nsroy at uiowa.edu
            Assignee: Chad La Joie
            Priority: Minor


The crypto nameID is significantly longer than the previous nameID format.  If an SP uses memcached, the xmltooling memcached extension seems to put the nameID value in a key, which is limited to 250 characters in length.  The xmltooling library fails to be able to persist the nameID value to memcache and you get a Shibboleth SP error page.  Scott mentioned he'd look at using a hash to decrease the size of the nameID value.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira