SP Startup takes 20+ minutes

[Jozef Misutka]

Hi,

depending on the machine but on a reasonable one it takes > 20minutes for
the shibd to initialise taking 100% of (one) CPU with almost constant
memory usage.

It is stuck around here

83      in ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S
(gdb) bt
#0  __memcpy_sse2_unaligned () at
../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:83
#1  0x00007f084cf37e41 in safeBuffer::operator=(safeBuffer const&) () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#2  0x00007f084cf3983d in operator<<(safeBuffer&, XSECSafeBufferFormatter
const&) () from /usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#3  0x00007f084cf0e87f in XSECC14n20010315::processNextNode() () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#4  0x00007f084cf109b0 in XSECCanon::outputBuffer(unsigned char*, unsigned
long) () from /usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#5  0x00007f084cf32a96 in TXFMC14n::readBytes(unsigned char*, unsigned int)
() from /usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#6  0x00007f084cf31f96 in TXFMSHA1::setInput(TXFMBase*) () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#7  0x00007f084cf13267 in
DSIGAlgorithmHandlerDefault::appendHashTxfm(TXFMChain*, unsigned short
const*) () from /usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#8  0x00007f084cf25731 in DSIGReference::calculateHash(unsigned char*,
unsigned int) () from /usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#9  0x00007f084cf26273 in DSIGReference::checkHash() () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#10 0x00007f084cf26373 in
DSIGReference::verifyReferenceList(DSIGReferenceList*, safeBuffer&) () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#11 0x00007f084cf1ee54 in DSIGSignature::verify() () from
/usr/lib/x86_64-linux-gnu/libxml-security-c.so.17
#12 0x00007f084d404749 in
xmlsignature::SignatureValidator::validate(xmlsignature::Signature const*)
const () from /usr/lib/x86_64-linux-gnu/libxmltooling.so.6
#13 0x00007f084dd572e6 in
opensaml::saml2md::SignatureMetadataFilter::verifySignature(xmlsignature::Signature*,
unsigned short const*) const () from /usr/lib/x86_64-linux-gnu/libsaml.so.8
#14 0x00007f084dd583ae in
opensaml::saml2md::SignatureMetadataFilter::doFilter(opensaml::saml2md::EntitiesDescriptor&,
bool) const () from /usr/lib/x86_64-linux-gnu/libsaml.so.8
#15 0x00007f084dd5869e in
opensaml::saml2md::SignatureMetadataFilter::doFilter(xmltooling::XMLObject&)
const () from /usr/lib/x86_64-linux-gnu/libsaml.so.8
#16 0x00007f084dd41252 in
opensaml::saml2md::MetadataProvider::doFilters(xmltooling::XMLObject&)
const () from /usr/lib/x86_64-linux-gnu/libsaml.so.8
#17 0x00007f084dd5bc41 in
opensaml::saml2md::XMLMetadataProvider::load(bool) () from
/usr/lib/x86_64-linux-gnu/libsaml.so.8
#18 0x00007f084dd5b698 in
opensaml::saml2md::XMLMetadataProvider::background_load() () from
/usr/lib/x86_64-linux-gnu/libsaml.so.8


We harvest multiple metadata feeds including edugain which means ~ 40MB of
xml data.


What options do I have to speed up the SP startup?

Thanks,
Jozef
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160426/408b7394/attachment.html>