<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-857cc1d6-6375-4721-a655-a77d07868389" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="cphillips@canarie.ca" id="email_cphillips@canarie.ca" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cphillips%40canarie.ca" style="color:#0052cc;; color: #3b73af; text-decoration: none">Chris Phillips</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1357" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-895b3ad3-d0fd-4871-9eed-5dd7ec8f0944" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1357" style="color: #3b73af; text-decoration: none">IDP-1357</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1357" style="color: #3b73af; text-decoration: none">java11 NPE with ldap configuration (Thread local SslConfig has not been set), works fine in 1.8.0_191-b12</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-895b3ad3-d0fd-4871-9eed-5dd7ec8f0944" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 3.4.0 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#0052cc;; color: #3b73af; text-decoration: none">Rod Widdowson</a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Attribute Resolver </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 05/Nov/18 9:47 AM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Environment:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0"><a href="https://asciinema.org/a/zId7awMqGvfW4wJ98A57dPUcZ" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://asciinema.org/a/zId7awMqGvfW4wJ98A57dPUcZ</a></p> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Labels:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> ldaptive </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-47c2c1ab-ee0b-494c-884a-814787eb670c" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom"> Major </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cphillips@canarie.ca" id="email_cphillips@canarie.ca" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cphillips%40canarie.ca" style="color:#0052cc;; color: #3b73af; text-decoration: none">Chris Phillips</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">Ldap connectivity works with Oracle jdk1.8.0_191 but fails to work when the execution environment java is changed to openjdk11+28 for the exact same configuration.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">It's as if the loading / configuration setup behaviour changes subtly.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Configurations I've tested:</p>
<ul>
<li><img class="emoticon" src="cid:jira-generated-image-static-check-ac53e166-0956-40cb-b5a5-7a2f0e350bcc" height="16" width="16" align="absmiddle" alt="" border="0"> Good: IdP-3.3.3, openjdk9.0.4, ldaptive-1.0.11 – no errors, ldap connections work, idp works </li>
</ul>
<ul>
<li><img class="emoticon" src="cid:jira-generated-image-static-check-ac53e166-0956-40cb-b5a5-7a2f0e350bcc" height="16" width="16" align="absmiddle" alt="" border="0"> Good: IdP-3.3.3, openjdk9.0.4, ldaptive-1.2.3 – no errors, ldap connections work, idp works </li>
</ul>
<ul>
<li> <img class="emoticon" src="cid:jira-generated-image-static-error-d6f44b7f-b834-412c-80ca-154d30fd61a2" height="16" width="16" align="absmiddle" alt="" border="0"> Not Good: IdP-3.4.0, openjdk9.0.4, ldaptive-1.0.11 – ERROR state - LDAP connections fail due to SslConfig NPE in per stacktrace</li>
</ul>
<ul>
<li><img class="emoticon" src="cid:jira-generated-image-static-error-d6f44b7f-b834-412c-80ca-154d30fd61a2" height="16" width="16" align="absmiddle" alt="" border="0"> Not Good: IdP-3.4.0, openjdk9.0.4, ldaptive-1.0.13 – ERROR state - LDAP connections fail due to SslConfig NPE per stacktrace</li>
</ul>
<ul>
<li><img class="emoticon" src="cid:jira-generated-image-static-check-ac53e166-0956-40cb-b5a5-7a2f0e350bcc" height="16" width="16" align="absmiddle" alt="" border="0"> GoodIdP-3.4.0, jdk1.8.0_191, ldaptive-1.0.11 --no errors, ldap connections work, idp works ok</li>
</ul>
<ul>
<li><img class="emoticon" src="cid:jira-generated-image-static-error-d6f44b7f-b834-412c-80ca-154d30fd61a2" height="16" width="16" align="absmiddle" alt="" border="0"> IdP-3.4.0, openjdk11+28, ldaptive-1.0.11 -<del>ERROR state</del> LDAP connections fail due to SslConfig NPE per stacktrace</li>
</ul> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Stacktrace: Stack traces from idp v3.4.1 with logback.xml set to TRACE for org.ldaptive</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">in a sandbox using our <a href="https://github.com/canariecaf/idp-installer-buildtools" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">build tool environment </a> but with v3.4.1 as the IdP connecting over TLS to the ldap instance.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p>
<div class="preformatted panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="preformattedContent panelContent" style="padding: 9px 12px">
<pre style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal; white-space: pre; word-break: normal; word-wrap: break-word; word-break: break-word; white-space: pre-wrap">
2018-11-02 11:14:45,957 - INFO [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:583] - Refreshing shibboleth.AttributeResolverService: startup date [Fri Nov 02 11:14:45 EDT 2018]; parent: Root WebApplicationContext2018-11-02 11:14:46,441 - TRACE [org.ldaptive.ssl.SslConfig:131] - setting credentialConfig: org.ldaptive.ssl.CredentialConfigFactory$2@628bd77e2018-11-02 11:14:46,457 - TRACE [org.ldaptive.BindConnectionInitializer:83] - setting bindDn: cn=shibboleth,ou=apps,dc=example,dc=com2018-11-02 11:14:46,457 - TRACE [org.ldaptive.BindConnectionInitializer:106] - setting bindCredential: <suppressed>2018-11-02 11:14:46,458 - TRACE [org.ldaptive.ConnectionConfig:85] - setting ldapUrl: ldaps://ldap.example.com2018-11-02 11:14:46,458 - TRACE [org.ldaptive.ConnectionConfig:110] - setting connectTimeout: 30002018-11-02 11:14:46,458 - TRACE [org.ldaptive.ConnectionConfig:162] - setting responseTimeout: 30002018-11-02 11:14:46,458 - TRACE [org.ldaptive.ConnectionConfig:213] - setting sslConfig: [org.ldaptive.ssl.SslConfig@727861082::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@628bd77e, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null]2018-11-02 11:14:46,459 - TRACE [org.ldaptive.ConnectionConfig:285] - setting connectionInitializer: [org.ldaptive.BindConnectionInitializer@1234219829::bindDn=cn=shibboleth,ou=apps,dc=example,dc=com, bindSaslConfig=null, bindControls=null]2018-11-02 11:14:46,464 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,465 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@6b86826a2018-11-02 11:14:46,465 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,465 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@4b9fa2f2018-11-02 11:14:46,465 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,466 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@32caae192018-11-02 11:14:46,478 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:120] - setting connectionStrategy: org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@3be46d9c2018-11-02 11:14:46,478 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:96] - setting properties: {}2018-11-02 11:14:46,535 - TRACE [org.ldaptive.ssl.SslConfig:131] - setting credentialConfig: org.ldaptive.ssl.CredentialConfigFactory$2@49f26462018-11-02 11:14:46,536 - TRACE [org.ldaptive.BindConnectionInitializer:83] - setting bindDn: cn=shibboleth,ou=apps,dc=example,dc=com2018-11-02 11:14:46,536 - TRACE [org.ldaptive.BindConnectionInitializer:106] - setting bindCredential: <suppressed>2018-11-02 11:14:46,536 - TRACE [org.ldaptive.ConnectionConfig:85] - setting ldapUrl: ldaps://ldap.example.com2018-11-02 11:14:46,536 - TRACE [org.ldaptive.ConnectionConfig:110] - setting connectTimeout: 30002018-11-02 11:14:46,536 - TRACE [org.ldaptive.ConnectionConfig:162] - setting responseTimeout: 30002018-11-02 11:14:46,537 - TRACE [org.ldaptive.ConnectionConfig:213] - setting sslConfig: [org.ldaptive.ssl.SslConfig@2080672560::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@49f2646, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null]2018-11-02 11:14:46,537 - TRACE [org.ldaptive.ConnectionConfig:285] - setting connectionInitializer: [org.ldaptive.BindConnectionInitializer@815593047::bindDn=cn=shibboleth,ou=apps,dc=example,dc=com, bindSaslConfig=null, bindControls=null]2018-11-02 11:14:46,542 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,542 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@111702282018-11-02 11:14:46,543 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,543 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@46ee70132018-11-02 11:14:46,543 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]2018-11-02 11:14:46,544 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@69d587312018-11-02 11:14:46,544 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:120] - setting connectionStrategy: org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@3be46d9c2018-11-02 11:14:46,544 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:96] - setting properties: {}2018-11-02 11:14:46,558 - TRACE [org.ldaptive.ssl.SslConfig:131] - setting credentialConfig: org.ldaptive.ssl.CredentialConfigFactory$2@49f26462018-11-02 11:14:46,558 - TRACE [org.ldaptive.ssl.SslConfig:155] - setting trustManagers: null2018-11-02 11:14:46,558 - TRACE [org.ldaptive.ssl.SslConfig:179] - setting hostnameVerifier: null2018-11-02 11:14:46,558 - TRACE [org.ldaptive.ssl.SslConfig:203] - setting hostnameVerifierConfig: null2018-11-02 11:14:46,559 - TRACE [org.ldaptive.ssl.SslConfig:227] - setting enabledCipherSuites: null2018-11-02 11:14:46,559 - TRACE [org.ldaptive.ssl.SslConfig:251] - setting enabledProtocols: null2018-11-02 11:14:46,559 - TRACE [org.ldaptive.ssl.SslConfig:276] - setting handshakeCompletedListeners: null2018-11-02 11:14:46,565 - TRACE [org.ldaptive.ssl.SslConfig:203] - setting hostnameVerifierConfig: [org.ldaptive.ssl.HostnameVerifierConfig@1958731110::certificateHostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]]2018-11-02 11:14:46,575 - TRACE [org.ldaptive.ssl.ThreadLocalTLSSocketFactory:48] - Using SSLContextInitializer=[org.ldaptive.ssl.X509SSLContextInitializer@1098139353::trustManagers=null, hostnameVerifierConfig=[org.ldaptive.ssl.HostnameVerifierConfig@1958731110::certificateHostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]], trustCerts=[Ljava.security.cert.X509Certificate;@34070bd2, authenticationCert=null]2018-11-02 11:14:46,582 - TRACE [org.ldaptive.ssl.X509SSLContextInitializer:123] - Initialize SSLContext with keyManagers=null and trustManagers=[[org.ldaptive.ssl.AggregateTrustManager@1445947009::trustManagers=[sun.security.ssl.X509TrustManagerImpl@6f6f65a4, [org.ldaptive.ssl.HostnameVerifyingTrustManager@160479339::hostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]]], trustStrategy=ALL]]2018-11-02 11:14:46,626 - TRACE [org.ldaptive.provider.jndi.JndiConnectionFactory:92] - [[ldapUrl=ldaps://ldap.example.com, count=0]] Attempting connection to ldaps://ldap.example.com for strategy org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@3be46d9c2018-11-02 11:14:46,645 - TRACE [org.ldaptive.ssl.ThreadLocalTLSSocketFactory:48] - Using SSLContextInitializer=[org.ldaptive.ssl.X509SSLContextInitializer@220666452::trustManagers=null, hostnameVerifierConfig=[org.ldaptive.ssl.HostnameVerifierConfig@1958731110::certificateHostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]], trustCerts=[Ljava.security.cert.X509Certificate;@34070bd2, authenticationCert=null]2018-11-02 11:14:46,646 - TRACE [org.ldaptive.ssl.X509SSLContextInitializer:123] - Initialize SSLContext with keyManagers=null and trustManagers=[[org.ldaptive.ssl.AggregateTrustManager@1878583108::trustManagers=[sun.security.ssl.X509TrustManagerImpl@409395b9, [org.ldaptive.ssl.HostnameVerifyingTrustManager@1407721609::hostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]]], trustStrategy=ALL]]2018-11-02 11:14:46,704 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:151] - checkServerTrusted for sun.security.ssl.X509TrustManagerImpl@409395b9 succeeded2018-11-02 11:14:46,707 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:112] - verifying hostname=ldap.example.com against cert=O=Example Institution, CN=ldap.example.com2018-11-02 11:14:46,708 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:183] - verifyDNS using subjectAltNames=[]2018-11-02 11:14:46,735 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:197] - verifyDNS using CN=[ldap.example.com]2018-11-02 11:14:46,735 - TRACE [org.ldaptive.ssl.DefaultHostnameVerifier:286] - matching for hostname=ldap.example.com, certName=ldap.example.com, isWildcard=false2018-11-02 11:14:46,735 - TRACE [org.ldaptive.ssl.DefaultHostnameVerifier:304] - match=true for ldap.example.com == ldap.example.com2018-11-02 11:14:46,736 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:201] - verifyDNS found hostname match: ldap.example.com2018-11-02 11:14:46,736 - DEBUG [org.ldaptive.ssl.HostnameVerifyingTrustManager:93] - checkCertificateTrusted for org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828 succeeded against O=Example Institution, CN=ldap.example.com2018-11-02 11:14:46,736 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:151] - checkServerTrusted for [org.ldaptive.ssl.HostnameVerifyingTrustManager@1407721609::hostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]] succeeded2018-11-02 11:14:46,737 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:179] - invoking getAcceptedIssuers for sun.security.ssl.X509TrustManagerImpl@409395b92018-11-02 11:14:46,737 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:179] - invoking getAcceptedIssuers for [org.ldaptive.ssl.HostnameVerifyingTrustManager@1407721609::hostnameVerifier=org.ldaptive.ssl.DefaultHostnameVerifier@6fc7e828, hostnames=[ldap.example.com]]2018-11-02 11:14:46,790 - DEBUG [org.ldaptive.BindOperation:138] - execute request=[org.ldaptive.BindRequest@608392736::bindDn=cn=shibboleth,ou=apps,dc=example,dc=com, saslConfig=null, controls=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@79702169::config=[org.ldaptive.ConnectionConfig@1234328865::ldapUrl=ldaps://ldap.example.com, connectTimeout=3000, responseTimeout=3000, sslConfig=[org.ldaptive.ssl.SslConfig@2080672560::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@49f2646, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=[org.ldaptive.BindConnectionInitializer@815593047::bindDn=cn=shibboleth,ou=apps,dc=example,dc=com, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@1535729270::metadata=[ldapUrl=ldaps://ldap.example.com, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.read.timeout=3000}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1948456514::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@3be46d9c, controlProcessor=org.ldaptive.provider.ControlProcessor@69d58731, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@4a6facb0]2018-11-02 11:14:46,823 - ERROR [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator:156] - Connection factory validation failedorg.ldaptive.OperationException: javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set] at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:67)Caused by: javax.naming.CommunicationException: ldap.example.com:636 at java.naming/com.sun.jndi.ldap.Connection.<init>(Connection.java:215)Caused by: java.lang.NullPointerException: Thread local SslConfig has not been set at org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:70)2018-11-02 11:14:46,827 - ERROR [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.LDAPDataConnector:151] - Data Connector 'myLDAP': Invalid connector configurationnet.shibboleth.idp.attribute.resolver.dc.ValidationException: [org.ldaptive.OperationException@1842537555::resultCode=PROTOCOL_ERROR, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1, message=javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set], providerException=javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set]] at net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator.validate(ConnectionFactoryValidator.java:158)Caused by: org.ldaptive.OperationException: javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set] at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:67)Caused by: javax.naming.CommunicationException: ldap.example.com:636 at java.naming/com.sun.jndi.ldap.Connection.<init>(Connection.java:215)Caused by: java.lang.NullPointerException: Thread local SslConfig has not been set at org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:70)2018-11-02 11:14:46,829 - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:551] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'myLDAP': Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Data Connector 'myLDAP': Invalid connector configuration2018-11-02 11:14:46,845 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:182] - Service 'shibboleth.AttributeResolverService': Initial load failednet.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'myLDAP': Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Data Connector 'myLDAP': Invalid connector configuration at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'myLDAP': Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Data Connector 'myLDAP': Invalid connector configuration at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1631)Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Data Connector 'myLDAP': Invalid connector configuration at net.shibboleth.idp.attribute.resolver.dc.ldap.impl.LDAPDataConnector.doInitialize(LDAPDataConnector.java:152)Caused by: net.shibboleth.idp.attribute.resolver.dc.ValidationException: [org.ldaptive.OperationException@1842537555::resultCode=PROTOCOL_ERROR, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1, message=javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set], providerException=javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set]] at net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator.validate(ConnectionFactoryValidator.java:158)Caused by: org.ldaptive.OperationException: javax.naming.CommunicationException: ldap.example.com:636 [Root exception is java.lang.NullPointerException: Thread local SslConfig has not been set] at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:67)Caused by: javax.naming.CommunicationException: ldap.example.com:636 at java.naming/com.sun.jndi.ldap.Connection.<init>(Connection.java:215)Caused by: java.lang.NullPointerException: Thread local SslConfig has not been set at org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:70)2018-11-02 11:14:46,846 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:184] - Service 'shibboleth.AttributeResolverService': Continuing to poll configuration
</pre>
</div>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">ldap.properties file:</p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
# LDAP authentication configuration, see authn/ldap-authn-config.xml
# Note, <span class="code-keyword" style="color: #000091">this</span> doesn't apply to the use of JAAS
## Authenticator strategy, either anonSearchAuthenticator, bindSearchAuthenticator, directAuthenticator, adAuthenticator
idp.authn.LDAP.authenticator=bindSearchAuthenticator
## Connection properties ##
idp.authn.LDAP.ldapURL=ldaps:<span class="code-comment" style="color: #808080">//ldap.example.com
</span>idp.authn.LDAP.useStartTLS=<span class="code-keyword" style="color: #000091">false</span>
idp.authn.LDAP.useSSL=<span class="code-keyword" style="color: #000091">true</span>
# Time in milliseconds that connects will block
#idp.authn.LDAP.connectTimeout = PT3S
# Time in milliseconds to wait <span class="code-keyword" style="color: #000091">for</span> responses
#idp.authn.LDAP.responseTimeout = PT3S
## SSL configuration, either jvmTrust, certificateTrust, or keyStoreTrust
idp.authn.LDAP.sslConfig=certificateTrust
## If using certificateTrust above, set to the trusted certificate's path
idp.authn.LDAP.trustCertificates=%{idp.home}/ssl/ldap-server.crt
## If using keyStoreTrust above, set to the truststore path
idp.authn.LDAP.trustStore=%{idp.home}/credentials/ldap-server.truststore
## Return attributes during authentication
idp.authn.LDAP.returnAttributes=cn
## DN resolution properties ##
# Search DN resolution, used by anonSearchAuthenticator, bindSearchAuthenticator
# <span class="code-keyword" style="color: #000091">for</span> AD: CN=Users,DC=example,DC=org
idp.authn.LDAP.baseDN=ou=people,dc=example,dc=com
idp.authn.LDAP.subtreeSearch=<span class="code-keyword" style="color: #000091">true</span>
idp.authn.LDAP.userFilter=(uid={user})
# bind search configuration
# <span class="code-keyword" style="color: #000091">for</span> AD: idp.authn.LDAP.bindDN=adminuser@domain.com
idp.authn.LDAP.bindDN=cn=shibboleth,ou=apps,dc=example,dc=com
idp.authn.LDAP.bindDNCredential=readonly
# Format DN resolution, used by directAuthenticator, adAuthenticator
# <span class="code-keyword" style="color: #000091">for</span> AD use idp.authn.LDAP.dnFormat=%s@domain.com
idp.authn.LDAP.dnFormat=uid=%s,ou=people,dc=example,dc=com
# LDAP attribute configuration, see attribute-resolver.xml
# Note, <span class="code-keyword" style="color: #000091">this</span> likely won't apply to the use of legacy V2 resolver configurations
idp.attribute.resolver.LDAP.ldapURL=%{idp.authn.LDAP.ldapURL}
idp.attribute.resolver.LDAP.connectTimeout=%{idp.authn.LDAP.connectTimeout:PT3S}
idp.attribute.resolver.LDAP.responseTimeout=%{idp.authn.LDAP.responseTimeout:PT3S}
idp.attribute.resolver.LDAP.baseDN=%{idp.authn.LDAP.baseDN:undefined}
idp.attribute.resolver.LDAP.bindDN=%{idp.authn.LDAP.bindDN:undefined}
idp.attribute.resolver.LDAP.bindDNCredential=%{idp.authn.LDAP.bindDNCredential:undefined}
idp.attribute.resolver.LDAP.useStartTLS=%{idp.authn.LDAP.useStartTLS:<span class="code-keyword" style="color: #000091">true</span>}
idp.attribute.resolver.LDAP.trustCertificates=%{idp.authn.LDAP.trustCertificates:undefined}
idp.attribute.resolver.LDAP.searchFilter=(uid=$resolutionContext.principal)
# LDAP pool configuration, used <span class="code-keyword" style="color: #000091">for</span> both authn and DN resolution
#idp.pool.LDAP.minSize = 3
#idp.pool.LDAP.maxSize = 10
#idp.pool.LDAP.validateOnCheckout = <span class="code-keyword" style="color: #000091">false</span>
#idp.pool.LDAP.validatePeriodically = <span class="code-keyword" style="color: #000091">true</span>
#idp.pool.LDAP.validatePeriod = PT5M
#idp.pool.LDAP.prunePeriod = PT5M
#idp.pool.LDAP.idleTime = PT10M
#idp.pool.LDAP.blockWaitTime = PT3S
#idp.pool.LDAP.failFastInitialize = <span class="code-keyword" style="color: #000091">false</span>
</pre>
</div>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">attribute-resolver.xml DataConnector (v3.4.0 syntax)</p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<DataConnector id=<span class="code-quote" style="color: #009100">"myLDAP"</span> xsi:type=<span class="code-quote" style="color: #009100">"LDAPDirectory"</span>
ldapURL=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.ldapURL}"</span>
baseDN=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.baseDN}"</span>
principal=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.bindDN}"</span>
principalCredential=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.bindDNCredential}"</span>
useStartTLS=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.useStartTLS:<span class="code-keyword" style="color: #000091; color: #009100">true</span>}"</span>
connectTimeout=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.connectTimeout}"</span>
trustFile=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.trustCertificates}"</span>
responseTimeout=<span class="code-quote" style="color: #009100">"%{idp.attribute.resolver.LDAP.responseTimeout}"</span>>
<FilterTemplate>
<![CDATA[
%{idp.attribute.resolver.LDAP.searchFilter}
]]>
</FilterTemplate>
<ConnectionPool
minPoolSize=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.minSize:3}"</span>
maxPoolSize=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.maxSize:10}"</span>
blockWaitTime=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.blockWaitTime:PT3S}"</span>
validatePeriodically=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.validatePeriodically:<span class="code-keyword" style="color: #000091; color: #009100">true</span>}"</span>
validateTimerPeriod=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.validatePeriod:PT5M}"</span>
expirationTime=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.idleTime:PT10M}"</span>
failFastInitialize=<span class="code-quote" style="color: #009100">"%{idp.pool.LDAP.failFastInitialize:<span class="code-keyword" style="color: #000091; color: #009100">false</span>}"</span> />
</DataConnector>
</pre>
</div>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1357#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-68cc8444-9db6-42bb-844b-5c7ad3417113" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1357#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v7.12.2#712003-<span title="61a922d5458c2b34faa51a4f8074da7e37e442eb" data-commit-id="61a922d5458c2b34faa51a4f8074da7e37e442eb}">sha1:61a922d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>