<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" /> <base href="https://issues.shibboleth.net/jira" />
<title>Message Title</title>
</head>
<body class="jira" style="color: #333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<!-- header here -->
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth-92263b1f-b026-44ea-a7c9-af10c0fc792e" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top" />
</td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth" id="email_q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=q%2B%2Bkqeknuoqs4%2Fw%2F9vk2fczi%2Blk%3D%40https%3A%2F%2Fsaml.sys.kth.se%2Fidp%2Fshibboleth" style="color:#3b73af;; color: #3b73af; text-decoration: none">q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth</a> <strong>created</strong> an issue
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 15px; background-color: #fff; border-left: 1px solid #ccc; border-top: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly">
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP" style="color: #3b73af; text-decoration: none">Shibboleth SP - C++</a> / <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-669" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-static-bug-739e245b-b927-4d73-a298-2ffa0ce1c053" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /></a> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-669" style="color: #3b73af; text-decoration: none">SSPCPP-669</a>
</td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-669" style="color: #3b73af; text-decoration: none">cached samlds.json files prematurely removed w/ multiple applicationIds</a> </span>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 10px; padding-bottom: 5px">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Issue Type:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-bug-739e245b-b927-4d73-a298-2ffa0ce1c053" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /> Bug
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Affects Versions:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
2.5.5, 2.5.4
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Assignee:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Scott Cantor</a>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Created:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
28/Aug/15 5:47 AM
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Environment:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">FreeBSD 10.1, apache 2.4 using MPM <b>event</b>.</p>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Priority:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-bcda8934-efca-4a69-99fb-86e82821d929" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom" /> Major
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Reporter:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth" id="email_q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=q%2B%2Bkqeknuoqs4%2Fw%2F9vk2fczi%2Blk%3D%40https%3A%2F%2Fsaml.sys.kth.se%2Fidp%2Fshibboleth" style="color:#3b73af;; color: #3b73af; text-decoration: none">q++kqeknuoqs4/w/9vk2fczi+lk=@https://saml.sys.kth.se/idp/shibboleth</a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 5px; padding-bottom: 10px">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">We have two applicationIDs, on the same apache+shibboleth server, that use SAMLDS. The problem we see is that occasionally, up to every other minute, a user gets an error using the SAMLDS feed (serverurl/Shibboleth.sso/DiscoFeed):</p>
<h2 style="margin: 10px 0 0 0; font-size: 20px; font-weight: normal; line-height: 1.500; margin: 40px 0 0 0"><a name="apacheerrorlog%3A" style="color: #3b73af; text-decoration: none"></a>apache error log:</h2>
<div class="preformatted panel" style="border-width: 1px;; border: 1px solid #ccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #ccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="preformattedContent panelContent" style="padding: 9px 12px">
<pre style="margin: 10px 0 0 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal; white-space: pre; word-break: normal; word-wrap: break-word; word-break: break-word; white-space: pre-wrap">[Fri Aug 28 11:25:19.029185 2015] [mod_shib:error] [pid 29731:tid 34515038208] [client 80.254.244.194:54035] error while processing request:Unable to access cached feed in (/var/cache/shibboleth//975b5865.json)., referer: https://servername.domain.tld/login/samlds.jsp?entityID=https%3A%2F%2Fservername.domain.tld%2FShibboleth.sso%2FMetadata&return=https%3A%2F%2Fservername.domain.tld%2FShibboleth.sso%2FLogin%3FSAMLDS%3D1%26target%3Dss%253Amem%253A181043fea37e73faf31f1e50105b72e96ce360450205009c0aca7ae52a380149
</pre>
</div>
</div>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">This started after upgrading from 2.5.3 to 2.5.4 (or 2.5.5) in july. With 2.5.4, a bug was fixed so older cached json files where appropriately removed. My suspicion is that the fix in Shibboleth-SP 2.5.4 <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-612" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">SSPCPP-612</a> triggers a bug when using multiple samlds applicaionId:s, in that they remove each other's samlds.json files. </p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">I.e. app1 removes app2's cached files somewhat prematurely, and vice versa.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">This is of course just a guess, I cannot see why that would happen from looking at the code, but the theory fits well with the problem at hand.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">We use shibboleth with about 50 differents setups for different customers, all using the same installed versions of OS, apache and shibboleht. Only one has two applicationId:s (2 different hostnames) using SAMLDS. Only those two applicationsId:s have problems. </p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Removing this patch would surely fix the problem (but leave a horrible amount of cached files behind again).</p>
<h2 style="margin: 10px 0 0 0; font-size: 20px; font-weight: normal; line-height: 1.500; margin: 40px 0 0 0"><a name="configuration" style="color: #3b73af; text-decoration: none"></a>configuration</h2>
<div class="code panel" style="border-width: 1px;; border: 1px solid #ccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #ccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-xml" style="margin: 10px 0 0 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<span class="code-tag" style="color: #000091"><span class="code-comment" style="color: #808080"><!-- app1 --></span></span>
<ApplicationOverride id=<span class="code-quote" style="color: #009100">"app1"</span>
entityID=<span class="code-quote" style="color: #009100">"https://servername1/shibboleth"</span>
REMOTE_USER=<span class="code-quote" style="color: #009100">"eppn personalIdentityNumber norEduPersonNIN"</span>>
<span class="code-tag" style="color: #000091"><Sessions checkAddress=<span class="code-quote" style="color: #009100">"false"</span> relayState=<span class="code-quote" style="color: #009100">"ss:mem"</span> handlerSSL=<span class="code-quote" style="color: #009100">"true"</span> cookieProps=<span class="code-quote" style="color: #009100">"https"</span>></span>
<SSO ignoreNoPassive=<span class="code-quote" style="color: #009100">"true"</span> discoveryProtocol=<span class="code-quote" style="color: #009100">"SAMLDS"</span>
discoveryURL=<span class="code-quote" style="color: #009100">"https://servername1/login/samlds.jsp"</span>> SAML2
<span class="code-tag" style="color: #000091"></SSO></span>
<span class="code-tag" style="color: #000091"></Sessions></span>
<span class="code-tag" style="color: #000091"><span class="code-comment" style="color: #808080"><!-- app2 --></span></span>
<ApplicationOverride id=<span class="code-quote" style="color: #009100">"app2"</span>
entityID=<span class="code-quote" style="color: #009100">"https://servername2/Shibboleth.sso/Metadata"</span>
REMOTE_USER=<span class="code-quote" style="color: #009100">"eppn personalIdentityNumber norEduPersonNIN persistent-id targeted-id"</span>>
<span class="code-tag" style="color: #000091"><Sessions checkAddress=<span class="code-quote" style="color: #009100">"false"</span> relayState=<span class="code-quote" style="color: #009100">"ss:mem"</span> handlerSSL=<span class="code-quote" style="color: #009100">"true"</span> cookieProps=<span class="code-quote" style="color: #009100">"https"</span>></span>
<SSO ignoreNoPassive=<span class="code-quote" style="color: #009100">"true"</span> discoveryProtocol=<span class="code-quote" style="color: #009100">"SAMLDS"</span>
discoveryURL=<span class="code-quote" style="color: #009100">"https://servername2/login/samlds.jsp"</span>> SAML2
<span class="code-tag" style="color: #000091"></SSO></span>
<span class="code-tag" style="color: #000091"></Sessions></span>
</pre>
</div>
</div>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">and two virtual hosts in apache, each with </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #ccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #ccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-xml" style="margin: 10px 0 0 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<span class="code-tag" style="color: #000091"><Location /></span>
ShibRequestSetting applicationId app1
<span class="code-tag" style="color: #000091"></Location></span>
</pre>
</div>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0px; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-669#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-c614ddfa-3738-44fd-9ddb-4933742f066f" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle" /> </a>
</td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-669#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #fff; border-top: 0; border-left: 1px solid #ccc; border-bottom: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px">
This message was sent by Atlassian JIRA <span id="footer-build-information">(v6.4.1#64016-<span title="5d7581434f35c063b7031942e62ed4d72a97fa9c" data-commit-id="5d7581434f35c063b7031942e62ed4d72a97fa9c}">sha1:5d75814</span>)</span>
</td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-98a7fb93-ee7e-44fd-a3b9-c131c13efd2d" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix" />
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>