<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-ce3ccece-9023-4f1f-8bff-218e9ea7b12c" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="f.ciclosi@unimc.it" id="email_f.ciclosi@unimc.it" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=f.ciclosi%40unimc.it" style="color:#0052cc;; color: #3b73af; text-decoration: none">Francesco Ciclosi</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1427" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-7e3c8f7e-08b3-41c8-a3a5-923d6089f9cf" height="16" width="16" border="0" align="absmiddle" alt="Bug"> IDP-1427</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1427" style="color: #3b73af; text-decoration: none">Re: The db connection is losed until Jetty restart, after an "Error committing transaction"</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">I Scott,<br> thank you for helping us.<br> Because we are member of the Italian IDEM Federation (that is also a member of the eduGain Inter-Federation) I have used as a reference the Consortium GARR guide published at the URL: <a href="http://example.com" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://github.com/ConsortiumGARR/idem-tutorials/blob/master/idem-fedops/HOWTO-Shibboleth/Identity%20Provider/Debian/%23%20HOWTO%20Install%20and%20Configure%20a%20Shibboleth%20IdP%20v3.4.2%20on%20Debian%20Linux%209%20(Stretch)%20with%20Apache2%20%2B%20Jetty9.md#howto-install-and-configure-a-shibboleth-idp-v342-on-debian-linux-9-stretch-with-apache2--jetty9</a></p> <p style="margin: 10px 0 0 0">The generation of the persistent-id is enabled in file saml-nameid.properties; below you can see an excerpt of the file</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
idp.persistentId.sourceAttribute = uid
idp.persistentId.salt = ### result of <span class="code-quote" style="color: #009100">'openssl rand -base64 36'</span>###
idp.persistentId.generator = shibboleth.StoredPersistentIdGenerator
idp.persistentId.computed = shibboleth.ComputedPersistentIdGenerator
idp.persistentId.dataSource = MyDataSource</pre>
</div>
</div> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0">In the file saml-nameid.xml we remove the comment from the line containing:<br> <ref bean="shibboleth.SAML2PersistentGenerator" /></p> <p style="margin: 10px 0 0 0">We also enabling the JPAStorageService for the StorageService of the user consent, by adding the following code at the global.xml file:</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<!-- A DataSource bean suitable <span class="code-keyword" style="color: #000091">for</span> use in the idp.persistentId.dataSource property. -->
<bean id=<span class="code-quote" style="color: #009100">"MyDataSource"</span> class=<span class="code-quote" style="color: #009100">"org.apache.commons.dbcp.BasicDataSource"</span>
p:driverClassName=<span class="code-quote" style="color: #009100">"com.mysql.jdbc.Driver"</span>
p:url=<span class="code-quote" style="color: #009100">"jdbc:mysql:<span class="code-comment" style="color: #808080">//localhost:3306/shibboleth?autoReconnect=<span class="code-keyword" style="color: #000091; color: #009100; color: #808080">true</span>"</span>
</span> p:username=<span class="code-quote" style="color: #009100">"##USER_DB_NAME##"</span>
p:password=<span class="code-quote" style="color: #009100">"##PASSWORD##"</span>
p:maxActive=<span class="code-quote" style="color: #009100">"10"</span>
p:maxIdle=<span class="code-quote" style="color: #009100">"5"</span>
p:maxWait=<span class="code-quote" style="color: #009100">"15000"</span>
p:testOnBorrow=<span class="code-quote" style="color: #009100">"<span class="code-keyword" style="color: #000091; color: #009100">true</span>"</span>
p:validationQuery=<span class="code-quote" style="color: #009100">"select 1"</span>
p:validationQueryTimeout=<span class="code-quote" style="color: #009100">"5"</span> />
<bean id=<span class="code-quote" style="color: #009100">"shibboleth.JPAStorageService"</span> class=<span class="code-quote" style="color: #009100">"org.opensaml.storage.impl.JPAStorageService"</span>
p:cleanupInterval=<span class="code-quote" style="color: #009100">"%{idp.storage.cleanupInterval:PT10M}"</span>
c:factory-ref=<span class="code-quote" style="color: #009100">"shibboleth.JPAStorageService.entityManagerFactory"</span>/>
<bean id=<span class="code-quote" style="color: #009100">"shibboleth.JPAStorageService.entityManagerFactory"</span>
class=<span class="code-quote" style="color: #009100">"org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean"</span>>
<property name=<span class="code-quote" style="color: #009100">"packagesToScan"</span> value=<span class="code-quote" style="color: #009100">"org.opensaml.storage.impl"</span>/>
<property name=<span class="code-quote" style="color: #009100">"dataSource"</span> ref=<span class="code-quote" style="color: #009100">"MyDataSource"</span>/>
<property name=<span class="code-quote" style="color: #009100">"jpaVendorAdapter"</span> ref=<span class="code-quote" style="color: #009100">"shibboleth.JPAStorageService.JPAVendorAdapter"</span>/>
<property name=<span class="code-quote" style="color: #009100">"jpaDialect"</span>>
<bean class=<span class="code-quote" style="color: #009100">"org.springframework.orm.jpa.vendor.HibernateJpaDialect"</span> />
</property>
</bean>
<bean id=<span class="code-quote" style="color: #009100">"shibboleth.JPAStorageService.JPAVendorAdapter"</span> class=<span class="code-quote" style="color: #009100">"org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter"</span>>
<property name=<span class="code-quote" style="color: #009100">"database"</span> value=<span class="code-quote" style="color: #009100">"MYSQL"</span> />
</bean>
</pre>
</div>
</div> <p style="margin: 10px 0 0 0">After that, we modify the idp.properties file, in order to indicate to IdP to store the data collected by User Consent into the "StorageRecords" table; below you can see an excerpt of the file</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
idp.cookie.secure = <span class="code-keyword" style="color: #000091">true</span>
idp.session.StorageService = shibboleth.JPAStorageService
idp.consent.StorageService = shibboleth.JPAStorageService
idp.replayCache.StorageService = shibboleth.JPAStorageService
idp.artifact.StorageService = shibboleth.JPAStorageService
</pre>
</div>
</div> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0">Moreover, about the user consent configuration I refer to the SWITCHaai's guide pubblished at the URL: <br> <a href="http://example.com" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://www.switch.ch/aai/guides/idp/user-consent/</a></p> <p style="margin: 10px 0 0 0">Finally, because we must comply with the Regulation (EU) 2016/679 (also called GDPR) and with the italian law about the data protection, we must take into account the preservation of the user preference about the consent, in order to comply with the accountability principle.</p> <p style="margin: 10px 0 0 0">Please, ask me if you need more details.</p> <p style="margin: 10px 0 0 0">Thanks a lot<br> Francesco</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1427#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-f2e0c5f1-cfaa-4e71-8f37-be574ab97c3c" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1427#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v7.12.2#712003-<span title="61a922d5458c2b34faa51a4f8074da7e37e442eb" data-commit-id="61a922d5458c2b34faa51a4f8074da7e37e442eb}">sha1:61a922d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>