<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" /> <base href="https://issues.shibboleth.net/jira" />
<title>Message Title</title>
</head>
<body class="jira" style="color: #333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<!-- header here -->
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-0704dcb6-d321-4977-ba64-110c83f4d130" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top" />
</td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="mdomingues@uiowa.edu" id="email_mdomingues@uiowa.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=mdomingues%40uiowa.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">mdomingues@uiowa.edu</a> <strong>created</strong> an issue
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 15px; background-color: #fff; border-left: 1px solid #ccc; border-top: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly">
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1028" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-2719200b-9c29-49f4-a005-738b1dd959d9" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1028" style="color: #3b73af; text-decoration: none">IDP-1028</a>
</td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1028" style="color: #3b73af; text-decoration: none">HttpSession NullPointerException on Apache Tomcat 8.5.4</a> </span>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 10px; padding-bottom: 5px">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Issue Type:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-2719200b-9c29-49f4-a005-738b1dd959d9" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /> Bug
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Affects Versions:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
3.2.1
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Assignee:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Scott Cantor</a>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Components:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
Session
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Created:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
30/Aug/16 10:51 AM
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Environment:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Windows Server 2012 R2<br /> Oracle Java Server JRE 8u92b14<br /> Apache Tomcat 8.5.4</p>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Priority:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-efc3159d-7b05-4855-9996-55fffb02c81c" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom" /> Major
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Reporter:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="mdomingues@uiowa.edu" id="email_mdomingues@uiowa.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=mdomingues%40uiowa.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">mdomingues@uiowa.edu</a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 5px; padding-bottom: 10px">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">After updating our production Shibboleth IdP cluster to the latest stable version of Apache Tomcat (8.5.4), we started receiving intermittent reports of clients encountering unhandled exceptions at the IdP while trying to log in to relying parties. These errors did not manifest during our testing due to the relatively light load on our test cluster. Over a twelve hour span of production operations, approximately 236 NullPointerExceptions were logged.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Once we were made aware of these issues, we upped our loggers to DEBUG, captured as much diagnostic information from production as possible, and then rolled back to Apache Tomcat 8.0.36.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">These issues occurred intermittently, with no discernable pattern as to particular clients, times of day, or relying parties. However, they always occurred in/after net.shibboleth.idp.session.impl.UpdateSessionWithSPSession, when attempting to add a new SPsession. DEBUG level logs from the IdP process log are as follows:</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:22,547 DEBUG </p> {https-jsse-nio-443-exec-22} <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:156 Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party <span class="error">[REDACTED]</span> to existing session <span class="error">[REDACTED]</span><br /> <br /> 2016-07-19 12:24:22,547 ERROR {https-jsse-nio-443-exec-22}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> net.shibboleth.idp.saml.profile:-1 Uncaught runtime exception<br /> net.shibboleth.utilities.java.support.logic.ConstraintViolationException: HttpSession cannot be null<br /> at net.shibboleth.utilities.java.support.logic.Constraint.isNotNull(Constraint.java:227)</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:22,547 WARN </p> {https-jsse-nio-443-exec-22} <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> org.opensaml.profile.action.impl.LogEvent:76 An error event occurred while processing the request: RuntimeException<br /> <br /> 2016-07-19 12:24:22,547 ERROR {https-jsse-nio-443-exec-22}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> java.lang.NullPointerException:76<br /> java.lang.NullPointerException: null</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:22,547 ERROR </p> {https-jsse-nio-443-exec-14}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,,]</span> java.lang.RuntimeException:76<br /> java.lang.RuntimeException: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState@171ebeb7 id = 'ErrorView', flow = 'SAML2/Redirect/SSO', entryActionList = list[[AnnotatedAction@d41ddbc targetAction = <span class="error">[EvaluateAction@2cdb0c49 expression = environment, resultExpression = requestScope.environment]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@247039e0 targetAction = <span class="error">[EvaluateAction@4679c0df expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@45d65991 targetAction = <span class="error">[EvaluateAction@311bac26 expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@14812cdc targetAction = <span class="error">[EvaluateAction@1c7669ab expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@6b9bb165 targetAction = <span class="error">[EvaluateAction@70d5aac expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@1af7615d targetAction = <span class="error">[EvaluateAction@35e37899 expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom]</span>, attributes = map[<span class="error">[empty]</span>]]], exceptionHandlerSet = list<span class="error">[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler@345e7d9]</span>, finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter@5e0b064e, outputMapper = <span class="error">[null]</span>] is not a view state - programmer error<br /> at net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler.handle(RethrowingFlowExecutionExceptionHandler.java:40)<br /> Caused by: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState@171ebeb7 id = 'ErrorView', flow = 'SAML2/Redirect/SSO', entryActionList = list[[AnnotatedAction@d41ddbc targetAction = <span class="error">[EvaluateAction@2cdb0c49 expression = environment, resultExpression = requestScope.environment]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@247039e0 targetAction = <span class="error">[EvaluateAction@4679c0df expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@45d65991 targetAction = <span class="error">[EvaluateAction@311bac26 expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@14812cdc targetAction = <span class="error">[EvaluateAction@1c7669ab expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@6b9bb165 targetAction = <span class="error">[EvaluateAction@70d5aac expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@1af7615d targetAction = <span class="error">[EvaluateAction@35e37899 expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom]</span>, attributes = map[<span class="error">[empty]</span>]]], exceptionHandlerSet = list<span class="error">[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler@345e7d9]</span>, finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter@5e0b064e, outputMapper = <span class="error">[null]</span>] is not a view state - programmer error<br /> at org.springframework.webflow.engine.Flow.getCurrentViewState(Flow.java:633)</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:23,829 ERROR </p> {https-jsse-nio-443-exec-3}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,FE24456F78C379F245B77804A89731D4]</span> org.springframework.webflow.execution.repository.FlowExecutionRestorationFailureException:76<br /> org.springframework.webflow.execution.repository.FlowExecutionRestorationFailureException: A problem occurred restoring the flow execution with key 'e1s1'<br /> at org.springframework.webflow.execution.repository.impl.DefaultFlowExecutionRepository.getFlowExecution(DefaultFlowExecutionRepository.java:113)<br /> Caused by: org.springframework.webflow.execution.repository.snapshot.SnapshotNotFoundException: No flow execution snapshot could be found with id '1'; perhaps the snapshot has been removed?<br /> at org.springframework.webflow.execution.repository.impl.SimpleFlowExecutionSnapshotGroup.getSnapshot(SimpleFlowExecutionSnapshotGroup.java:73)</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:25,532 ERROR </p> {https-jsse-nio-443-exec-8}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> java.lang.RuntimeException:76<br /> java.lang.RuntimeException: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState@171ebeb7 id = 'ErrorView', flow = 'SAML2/Redirect/SSO', entryActionList = list[[AnnotatedAction@d41ddbc targetAction = <span class="error">[EvaluateAction@2cdb0c49 expression = environment, resultExpression = requestScope.environment]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@247039e0 targetAction = <span class="error">[EvaluateAction@4679c0df expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@45d65991 targetAction = <span class="error">[EvaluateAction@311bac26 expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@14812cdc targetAction = <span class="error">[EvaluateAction@1c7669ab expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@6b9bb165 targetAction = <span class="error">[EvaluateAction@70d5aac expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@1af7615d targetAction = <span class="error">[EvaluateAction@35e37899 expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom]</span>, attributes = map[<span class="error">[empty]</span>]]], exceptionHandlerSet = list<span class="error">[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler@345e7d9]</span>, finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter@5e0b064e, outputMapper = <span class="error">[null]</span>] is not a view state - programmer error<br /> at net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler.handle(RethrowingFlowExecutionExceptionHandler.java:40)<br /> Caused by: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState@171ebeb7 id = 'ErrorView', flow = 'SAML2/Redirect/SSO', entryActionList = list[[AnnotatedAction@d41ddbc targetAction = <span class="error">[EvaluateAction@2cdb0c49 expression = environment, resultExpression = requestScope.environment]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@247039e0 targetAction = <span class="error">[EvaluateAction@4679c0df expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@45d65991 targetAction = <span class="error">[EvaluateAction@311bac26 expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@14812cdc targetAction = <span class="error">[EvaluateAction@1c7669ab expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@6b9bb165 targetAction = <span class="error">[EvaluateAction@70d5aac expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response]</span>, attributes = map[<span class="error">[empty]</span>]], [AnnotatedAction@1af7615d targetAction = <span class="error">[EvaluateAction@35e37899 expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom]</span>, attributes = map[<span class="error">[empty]</span>]]], exceptionHandlerSet = list<span class="error">[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler@345e7d9]</span>, finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter@5e0b064e, outputMapper = <span class="error">[null]</span>] is not a view state - programmer error<br /> at org.springframework.webflow.engine.Flow.getCurrentViewState(Flow.java:633)</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The Apache Tomcat access log for this particular event is as follows (SAMLRequest and client IP redacted):</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2016-07-19 12:24:21,829 INFO </p> {https-jsse-nio-443-exec-17}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest= <span class="error">[REDACTED]</span> HTTP/1.1" 302 -<br /> 2016-07-19 12:24:21,844 INFO </p> {https-jsse-nio-443-exec-9}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/profile/SAML2/Redirect/SSO?execution=e1s1 HTTP/1.1" 200 4403<br /> 2016-07-19 12:24:21,891 INFO </p> {https-jsse-nio-443-exec-6}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/bs-3.3.6/bootstrap.min.css HTTP/1.1" 304 -<br /> 2016-07-19 12:24:21,954 INFO </p> {https-jsse-nio-443-exec-22} <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/css/simple-login.css HTTP/1.1" 304 -<br /> 2016-07-19 12:24:22,016 INFO {https-jsse-nio-443-exec-10} <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/bs-3.3.6/bootstrap.min.js HTTP/1.1" 304 -<br /> 2016-07-19 12:24:22,047 INFO {https-jsse-nio-443-exec-7} <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "GET /idp/images/uiowa-dome.png HTTP/1.1" 304 -<br /> 2016-07-19 12:24:22,282 INFO {https-jsse-nio-443-exec-22}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,XXX.XXX.XXX.XXX,B3E08A6789793B08F2BA17D5B20273AB]</span> XXX.XXX.XXX.XXX 443 "POST /idp/profile/SAML2/Redirect/SSO?execution=e1s1 HTTP/1.1" 400 -<br /> 1969-12-31 17:59:59,00-1 INFO </p> {https-jsse-nio-443-exec-22}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> <span class="error">[,-,-]</span> - </p>
<del>
1 "
</del>" 500 –
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">We made no changes to our IdP configuration during the Tomcat upgrade, and only updated Tomcat’s server.xml to explicitly use the JSSE-based HTTP connector, to maintain parity with our Tomcat 8.0.36 deployment.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The Tomcat project is pushing users in the direction of the 8.5.X branch (advertising it as latest stable) and will no longer be updating the 8.0.X branch as of later this year. While they claim compatibility with the 8.0.X release branch, the 8.5.X branch is technically based on the 9.0 branch, which was then selectively rolled back to match 8.0.X while still including certain refactoring and new features.</p>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0px; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1028#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-b2d83c1b-f951-4556-9033-5fbf9956b3db" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle" /> </a>
</td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1028#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #fff; border-top: 0; border-left: 1px solid #ccc; border-bottom: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px">
This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.0.10#70120-<span title="37e3d7a6fc4d580639533e7f7c232c925e554a6a" data-commit-id="37e3d7a6fc4d580639533e7f7c232c925e554a6a}">sha1:37e3d7a</span>)</span>
</td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-eb3722bb-ef42-4eea-bac8-d7efd18e52c0" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix" />
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>