<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head> 
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> 
        <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"> 
        <base href="https://issues.shibboleth.net/jira"> 
        <title>Message Title</title> 
    </head> 
    <body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429"> 
        <table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5"> 
            <!-- header here --> 
            <tbody>
                <tr> 
                    <td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px"> 
                        <table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                            <tbody>
                                <tr> 
                                    <td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-19f51658-7352-4de2-862f-e7a7c354fea0" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td> 
                                    <td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp" id="email_zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=zjqdlhuhqacq0vbpdthwhftaj60%3D%40https%3A%2F%2Fregistry.shibboleth.ox.ac.uk%2Fidp" style="color:#3b73af;; color: #3b73af; text-decoration: none">zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp</a> <strong>created</strong> an issue </td> 
                                </tr> 
                            </tbody>
                        </table> </td> 
                </tr> 
                <tr> 
                    <td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px"> 
                        <table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate"> 
                            <tbody>
                                <tr> 
                                    <!-- there needs to be content in the cell for it to render in some clients --> 
                                    <td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td> 
                                </tr> 
                                <tr> 
                                    <td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff"> 
                                        <table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                                            <tbody>
                                                <tr> 
                                                    <td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1264" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-af3a6603-ec83-4bcf-a47b-0c071084a237" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1264" style="color: #3b73af; text-decoration: none">IDP-1264</a> </td> 
                                                </tr> 
                                                <tr> 
                                                    <td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1264" style="color: #3b73af; text-decoration: none">SLO session lookup failure 30min after logon</a> </span> </td> 
                                                </tr> 
                                            </tbody>
                                        </table> </td> 
                                </tr> 
                                <tr> 
                                    <td class="email-content-main mobile-expand  wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff"> 
                                        <table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                                            <tbody>
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th> 
                                                    <td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-af3a6603-ec83-4bcf-a47b-0c071084a237" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 3.2.0 </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Scott Cantor</a> </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Logout, Session </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 12/Mar/18 11:42 AM </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Environment:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">OS is Debian 8.1 Jessie (Linux 3.16.0-5-amd64)</p> </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Labels:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Session storageservice </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th> 
                                                    <td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-minor-37b264f9-9a7e-4bed-8462-621531dfeb4a" height="16" width="16" border="0" align="absmiddle" alt="Minor" style="vertical-align: text-bottom"> Minor </td> 
                                                </tr> 
                                                <tr> 
                                                    <th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th> 
                                                    <td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp" id="email_zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=zjqdlhuhqacq0vbpdthwhftaj60%3D%40https%3A%2F%2Fregistry.shibboleth.ox.ac.uk%2Fidp" style="color:#3b73af;; color: #3b73af; text-decoration: none">zjqdlhuhqacq0vbpdthwhftaj60=@https://registry.shibboleth.ox.ac.uk/idp</a> </td> 
                                                </tr> 
                                            </tbody>
                                        </table> </td> 
                                </tr> 
                                <tr> 
                                    <td class="email-content-main mobile-expand  issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff"> 
                                        <table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px"> 
                                            <tbody>
                                                <tr> 
                                                    <td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">This is the same problem as discussed on users@shibboleth.net threads:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">"Transientid and session timeout" 19/02/2018</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">"SLO session lookup failure" 22/02/2018</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">To recap, we get a repeatable SessionNotFound error during SLO when it happens after 30min of inactivity. To give a bit of context, SLO has not been something that we have supported in the past but it is now being used in connection with our migration of email to Office365 and the "sign out" button that appears in most of the MS portals. SLO then happens via our ADFS 4 service which then sends a SAML logout request to our Shibboleth IdP (which is acting in the role of claims provider to the ADFS service). This normally works fine, at least clearing the sessions out from ADFS and the Shib IdP but if this is attempted 30min after the login it fails at the IdP which then reports the error back to ADFS which presents it as a rather unhelpful error message to the user. An example of errors logged in the idp-process.log is below:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><tt>2018-02-20 16:08:50,115 - DEBUG <span class="error">[net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:144]</span> - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2018-02-20 16:08:50,278 - DEBUG <span class="error">[net.shibboleth.idp.session.impl.StorageBackedSessionManager:743]</span> - Performing secondary lookup on service ID }}{{<a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">http://sts-stg.fed.ox.ac.uk/adfs/services/trust</a></tt>{{ and key lfy/VcLhM1E7V4PZEF3FlUvt3DA= 2018-02-20 16:08:50,279 - DEBUG <span class="error">[net.shibboleth.idp.session.impl.StorageBackedSessionManager:765]</span> - Secondary lookup failed on service ID }}<tt><a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">http://sts-stg.fed.ox.ac.uk/adfs/services/trust</a></tt>{{ and key lfy/VcLhM1E7V4PZEF3FlUvt3DA= 2018-02-20 16:08:50,279 - INFO <span class="error">[net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest:315]</span> - Profile Action ProcessLogoutRequest: No active session(s) found matching LogoutRequest 2018-02-20 16:08:50,306 - WARN <span class="error">[org.opensaml.profile.action.impl.LogEvent:76]</span> - An error event occurred while processing the request: SessionNotFound }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">This error doesn't happen if a SLO is attempted under 30min after the initial login.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">However, if we bounce the test IdP in between the authentication and the logout request, we see the error straight away (e.g. <5min after login). This still seems to point to an issue with server side session storage even though we have configured our IdP to use client side session storage. So that is strange.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">We have compared the SAML logout request provided by ADFS (as logged in the IdP log) for both a success & failure case and we can't see anything wrong with the request that ADFS is providing.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">This is an example of what we see for a success case:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><tt>2018-02-20 15:16:13,029 - DEBUG <span class="error">[PROTOCOL_MESSAGE:121]</span> - <?xml version="1.0" encoding="UTF-8"?> <samlp:LogoutRequest Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified" Destination=</tt><tt><a href="https://idp.iamtest.ox.ac.uk/idp/profile/SAML2/Redirect/SLO" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"https://idp.iamtest.ox.ac.uk/idp/profile/SAML2/Redirect/SLO"</a></tt>{{ ID="_2c434375-f900-4e5e-9528-84cf9043f798" IssueInstant="2018-02-20T15:16:12.079Z" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"> <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">}}<tt><a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">http://sts-stg.fed.ox.ac.uk/adfs/services/trust</a></tt><tt></Issuer> <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier=</tt><tt><a href="https://idp.iamtest.ox.ac.uk/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"https://idp.iamtest.ox.ac.uk/shibboleth"</a></tt>{{ SPNameQualifier=}}<tt><a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"http://sts-stg.fed.ox.ac.uk/adfs/services/trust"</a></tt>{{xmlns="urn:oasis:names:tc:SAML:2.0:assertion">lfy/VcLhM1E7V4PZEF3FlUvt3DA=</NameID> <samlp:SessionIndex>_fde11f4aed98c52877f1dfb2b6d50908</samlp:SessionIndex> </samlp:LogoutRequest> }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">And this is an example of a failure case:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><tt>2018-02-20 16:08:49,863 - DEBUG <span class="error">[PROTOCOL_MESSAGE:121]</span> - <?xml version="1.0" encoding="UTF-8"?> <samlp:LogoutRequest Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified" Destination=</tt><tt><a href="https://idp.iamtest.ox.ac.uk/idp/profile/SAML2/Redirect/SLO" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"https://idp.iamtest.ox.ac.uk/idp/profile/SAML2/Redirect/SLO"</a></tt>{{ ID="_d88843d6-3154-4e6e-bfff-2c98562c8617" IssueInstant="2018-02-20T16:08:49.782Z" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"> <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">}}<tt><a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">http://sts-stg.fed.ox.ac.uk/adfs/services/trust</a></tt><tt></Issuer> <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier=</tt><tt><a href="https://idp.iamtest.ox.ac.uk/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"https://idp.iamtest.ox.ac.uk/shibboleth"</a></tt>{{ SPNameQualifier=}}<tt><a href="http://sts-stg.fed.ox.ac.uk/adfs/services/trust" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">"http://sts-stg.fed.ox.ac.uk/adfs/services/trust"</a></tt>{{xmlns="urn:oasis:names:tc:SAML:2.0:assertion">lfy/VcLhM1E7V4PZEF3FlUvt3DA=</NameID> <samlp:SessionIndex>_b0e2c2ac3add4cc63bc05e90fb4f13f9</samlp:SessionIndex> </samlp:LogoutRequest> }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">In both cases we have checked that the SessionIndex matches that provided by the IdP in the AuthnStatement contained within the SAML assertion sent to ADFS after the login.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Currently we have the following timeouts set in idp.properties but none of these seem to change the time at which the SLO error starts occurring:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><tt>idp.session.timeout = PT8H</tt><br> {{idp.session.slop = PT8H }}<br> {{idp.session.defaultSPlifetime = PT8H }}</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">How should we go about looking at this problem further?</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Even though we have the IdP logging turned up we don't seem to have much in the IdP logs about the session data it is retrieving from the client side and so why the session lookup is failing. Is there a way we can get more debug for this? Perhaps there is something in our session cache's storage configuration that needs tweaking to affect this behaviour. Any suggestions please?</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Thanks in advance. Julian</p> </td> 
                                                </tr> 
                                            </tbody>
                                        </table> </td> 
                                </tr> 
                                <tr> 
                                    <td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff"> 
                                        <table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> 
                                            <tbody>
                                                <tr> 
                                                    <td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0"> 
                                                        <table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                                                            <tbody>
                                                                <tr> 
                                                                    <td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1264#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-ebb732f0-695c-4c80-8aa4-c7caa9c8556e" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td> 
                                                                    <td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1264#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td> 
                                                                </tr> 
                                                            </tbody>
                                                        </table> </td> 
                                                </tr> 
                                            </tbody>
                                        </table> </td> 
                                </tr> 
                                <!-- there needs to be content in the cell for it to render in some clients --> 
                                <tr> 
                                    <td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td> 
                                </tr> 
                            </tbody>
                        </table> </td> 
                </tr> 
                <tr> 
                    <td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px"> 
                        <table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                            <tbody>
                                <tr> 
                                    <td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td> 
                                    <td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top"> 
                                        <table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt"> 
                                            <tbody>
                                                <tr> 
                                                    <td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-ae922612-59fc-449d-88e2-cbb0726ade17" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td> 
                                                </tr> 
                                            </tbody>
                                        </table> </td> 
                                </tr> 
                            </tbody>
                        </table> </td> 
                </tr> 
            </tbody>
        </table>   
    </body>
</html>