Multi-tab login errors

[Russell Beall]

Hi,

I am staging in the 2.3.3 release and we are expecting to go live this weekend, however, I have one issue which worries me about letting this loose.

I notice under my existing 2.1.5 environment, I can login to a site, and then use the "Open in Tabs" option in Safari or Firefox to open 31 separate Shibb'ed endpoints with the PreviousSession handler.  All of these sites load without errors.

Under the 2.3.3 environment, I am noticing that about half of these sites load correctly, and then the later tabs have an increasing frequency of throwing one of a set of different errors starting with the most frequent:

WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:344] - Error decoding authentication request message
org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message

OR

ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:555] - Authentication failed with the error:
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No user identified by login handler.

OR, in the catalina.out:

SEVERE: Servlet.service() for servlet AuthenticationEngine threw exception
java.lang.NullPointerException
        at edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.returnToProfileHandler(AuthenticationEngine.java:168)

---

I am hoping this is just an inconsequential side effect of opening so many sites under my session, and that separate user sessions will load independently without (I suspect) threading issues.  If I run through the list of sites one by one and click each one independently, they all load correctly.

The acid test will be whether these errors show up frequently when running live, which I plan to try anyway I suppose, but I was hoping for some quick advice or reassurance if any were available ahead of this.

Thanks,
Russ.