changes in login pages - kills IDP?

Paul Hethmon paul.hethmon at clareitysecurity.com
Mon Mar 19 21:52:57 GMT 2012


Kill Tomcat completely, clear all of your Tomcat and Shib logs. Then start
it up.

Do not load or reload the IdP code using Tomcat's reload feature (bug).

I don't see an error beyond that.

Paul


On 3/19/12 5:35 PM, "Oleg Chaikovsky" <oleg.chaikovsky at aegisusa.net> wrote:

>
>
>Yeah - I pretty much felt this was the issue but the catalina.out log
>file did not offer succinct clues to me (well, at least that pointed me
>in the right direction). the threads errors were well known in this list
>that its something that can be ignored. it also showed the deployment
>descriptor for idp.xml which made me wonder why that showed up.
>
>I realize this is the shib list, and not the tomcat list. If you can
>point me to a possible avenue
>of solution I will go there otherwise I will check Tomcat lists
>
>
>  see my catalina.out below
>--------------------------------------------------------------------------
>----------
>
>Mar 18, 2012 5:36:27 PM org.apache.catalina.core.StandardService stop
>INFO: Stopping service Catalina
>Mar 18, 2012 5:36:27 PM org.apache.catalina.loader.WebappClassLoader
>clearReferencesThreads
>SEVERE: The web application [/idp] appears to have started a thread
>named [MultiThreadedHttpConnectionManager cleanup] but has failed to
>stop it. This is very likely to create a memory leak.
>Mar 18, 2012 5:36:27 PM org.apache.catalina.loader.WebappClassLoader
>clearReferencesThreads
>SEVERE: The web application [/idp] appears to have started a thread
>named [Timer-1] but has failed to stop it. This is very likely to create
>a memory leak.
>Mar 18, 2012 5:36:27 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory.ThreadLocalSslConf
>ig]
>(value
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory$ThreadLocalSslConf
>ig at 291fc2])
>and a value of type
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer] (value
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer at 1e41869]) but
>failed to remove it when the web application was stopped. This is very
>likely to create a memory leak.
>Mar 18, 2012 5:36:33 PM org.apache.catalina.core.AprLifecycleListener init
>INFO: The APR based Apache Tomcat Native library which allows optimal
>performance in production environments was not found on the
>java.library.path:
>/usr/java/jdk1.6.0_30/jre/lib/i386/client:/usr/java/jdk1.6.0_30/jre/lib/i3
>86:/usr/java/jdk1.6.0_30/jre/../lib/i386::/apps/dev/apr/lib:/apps/dev/tomc
>at/lib:/usr/java/packages/lib/i386:/lib:/usr/lib
>Mar 18, 2012 5:36:33 PM org.apache.catalina.startup.Catalina load
>INFO: Initialization processed in 597 ms
>Mar 18, 2012 5:36:33 PM org.apache.catalina.core.StandardService start
>INFO: Starting service Catalina
>Mar 18, 2012 5:36:33 PM org.apache.catalina.core.StandardEngine start
>INFO: Starting Servlet Engine: Apache Tomcat/6.0.35
>Mar 18, 2012 5:36:33 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor host-manager.xml
>Mar 18, 2012 5:36:33 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor idp.xml
>Mar 18, 2012 5:36:52 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor manager.xml
>Mar 18, 2012 5:36:52 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory docs
>Mar 18, 2012 5:36:52 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory ROOT
>Mar 18, 2012 5:36:53 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory examples
>Mar 18, 2012 5:36:54 PM org.apache.jk.common.ChannelSocket init
>INFO: JK: ajp13 listening on /0.0.0.0:8009
>Mar 18, 2012 5:36:55 PM org.apache.jk.server.JkMain start
>INFO: Jk running ID=0 time=0/60  config=null
>Mar 18, 2012 5:36:55 PM org.apache.catalina.startup.Catalina start
>INFO: Server startup in 21699 ms
>Mar 18, 2012 5:46:25 PM org.apache.catalina.startup.HostConfig
>checkResources
>INFO: Undeploying context [/idp]
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearReferencesThreads
>SEVERE: The web application [/idp] appears to have started a thread
>named [MultiThreadedHttpConnectionManager cleanup] but has failed to
>stop it. This is very likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearReferencesThreads
>SEVERE: The web application [/idp] appears to have started a thread
>named [Timer-1] but has failed to stop it. This is very likely to create
>a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory.ThreadLocalSslConf
>ig]
>(value
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory$ThreadLocalSslConf
>ig at cdf872])
>and a value of type
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer] (value
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer at 7227a8]) but
>failed to remove it when the web application was stopped. This is very
>likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory.ThreadLocalSslConf
>ig]
>(value
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory$ThreadLocalSslConf
>ig at cdf872])
>and a value of type
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer] (value
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer at 899e6a]) but
>failed to remove it when the web application was stopped. This is very
>likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type [org.apache.xml.security.algorithms.SignatureAlgorithm$3] (value
>[org.apache.xml.security.algorithms.SignatureAlgorithm$3 at ff665a]) and a
>value of type [java.util.HashMap] (value
>[{http://www.w3.org/2000/09/xmldsig#rsa-sha1=Sun RSA private CRT key,
>2048 bits
>   modulus:
>16774957166316599701928033554832039253852485214770847429037183550999407472
>15479442876931408455345861856936876742541697057992786543782856912016833223
>68625726620332638303132655379408505858227131062021527120092357078657586137
>02994228646253876828004006839007305935142908128131478186830370045981046976
>94945472296451752733503877690928755069298480814732430524808882478697650414
>71280897385252267826660529302981717650398079912756579089657118457079615681
>33778568910629331386418410838591150196363755405576614710192484295660534236
>44046805041354970247174142907167442743367847153523323018306293158724488154
>8865468725312445147223121
>   public exponent:  65537
>   private exponent:
>68666825747406109556986642076304853298610040260716469166849340543915819194
>57660102546567419111580242616544179985682302664872130950465035381338112042
>33199927986277017220522719359047864055214496391481378160537965324800809206
>72326498297610930263036680267642552500431633482366169540579876592388047553
>38557179195906501884901059725482315193407349121815334406532744666376572609
>37945407746940930170464462447518889876141861869204132181418825851844058514
>07287019715279873395550091436572457260778176817562587153613655776813569283
>63148633175287055810401716758709192865387439353439940336358153271997865798
>266395773756098481730573
>   prime p:
>14381410109215329325865355932489143020064680631193723026375973879919598539
>07885897124234292223169689754452413932632607316137302579278317839632224489
>72237521305943640085521173257681255232586423802433777239165106154225369819
>03514386670408231086477121718041416290582053945695792967787481320898208688
>3501527207311
>   prime q:
>11664334052727925292700386082518158474167122736840031623406848105781305551
>21666976012869076352742295408196025599093868281840774091405828713072411532
>72641400341280176182413115626224095948832124738064986513101749880842450512
>55281198236998510219988349428175987702814510325840251703977182974137202163
>7896309575711
>   prime exponent p:
>47161949138235784041304641607192374046299054904193889754317779365432047820
>60253551580640463930354299434318214175220104130250531308093078262565538357
>43370738347397761984531036766114643248660668074813729713617721510995567107
>23763858327420190504686863903466151779481743656391653945662533919578909795
>996381017433
>   prime exponent q:
>64338314489839597693795299830164473607682274106845034584209553714068146904
>94398510137663341482716822056377028149235431057305360732140516372256069776
>84775620021810136078558938732681514938787627928698475282987496596208819991
>49665080041695400452013190026875471789835014384057747356008237687426296751
>275061337143
>   crt coefficient:
>35558957884195349982350272952223594224581486215643870699975605200110897454
>81148283945291803213824850260701527791265770546745093988617962592904126073
>36482066958470591941294750665775085882055055849576932673686905196710041833
>34310913122552839070060798952190159948190814023554451269064848680746311335
>12799897258}])
>but failed to remove it when the web application was stopped. This is
>very likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type [org.apache.xml.security.algorithms.MessageDigestAlgorithm$1]
>(value
>[org.apache.xml.security.algorithms.MessageDigestAlgorithm$1 at 198c113])
>and a value of type [java.util.HashMap] (value
>[{http://www.w3.org/2000/09/xmldsig#sha1=SHA-1 Message Digest from SUN,
><initialized>
>}]) but failed to remove it when the web application was stopped. This
>is very likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type [org.apache.xml.security.utils.UnsyncBufferedOutputStream$1] (value
>[org.apache.xml.security.utils.UnsyncBufferedOutputStream$1 at 37eaab]) and
>a value of type [byte[]] (value [[B at 10f80a9]) but failed to remove it
>when the web application was stopped. This is very likely to create a
>memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type [org.apache.xml.security.utils.UnsyncByteArrayOutputStream$1]
>(value
>[org.apache.xml.security.utils.UnsyncByteArrayOutputStream$1 at 1780f30])
>and a value of type [byte[]] (value [[B at 12d297a]) but failed to remove
>it when the web application was stopped. This is very likely to create a
>memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory.ThreadLocalSslConf
>ig]
>(value
>[edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory$ThreadLocalSslConf
>ig at cdf872])
>and a value of type
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer] (value
>[edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer at 1fe3238]) but
>failed to remove it when the web application was stopped. This is very
>likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.loader.WebappClassLoader
>clearThreadLocalMap
>SEVERE: The web application [/idp] created a ThreadLocal with key of
>type [org.apache.xml.security.algorithms.SignatureAlgorithm$1] (value
>[org.apache.xml.security.algorithms.SignatureAlgorithm$1 at 19331eb]) and a
>value of type [java.util.HashMap] (value
>[{http://www.w3.org/2000/09/xmldsig#rsa-sha1=org.apache.xml.security.algor
>ithms.implementations.SignatureBaseRSA$SignatureRSASHA1 at b27bb5}])
>but failed to remove it when the web application was stopped. This is
>very likely to create a memory leak.
>Mar 18, 2012 5:46:25 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor idp.xml
>Mar 18, 2012 5:46:36 PM org.apache.catalina.core.StandardService stop
>INFO: Stopping service Catalina
>Mar 18, 2012 5:46:40 PM org.apache.catalina.core.AprLifecycleListener init
>INFO: The APR based Apache Tomcat Native library which allows optimal
>performance in production environments was not found on the
>java.library.path:
>/usr/java/jdk1.6.0_30/jre/lib/i386/client:/usr/java/jdk1.6.0_30/jre/lib/i3
>86:/usr/java/jdk1.6.0_30/jre/../lib/i386::/apps/dev/apr/lib:/apps/dev/tomc
>at/lib:/usr/java/packages/lib/i386:/lib:/usr/lib
>Mar 18, 2012 5:46:40 PM org.apache.catalina.startup.Catalina load
>INFO: Initialization processed in 535 ms
>Mar 18, 2012 5:46:40 PM org.apache.catalina.core.StandardService start
>INFO: Starting service Catalina
>Mar 18, 2012 5:46:40 PM org.apache.catalina.core.StandardEngine start
>INFO: Starting Servlet Engine: Apache Tomcat/6.0.35
>Mar 18, 2012 5:46:40 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor host-manager.xml
>Mar 18, 2012 5:46:40 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor idp.xml
>Mar 18, 2012 5:46:41 PM org.apache.catalina.startup.HostConfig
>deployDescriptor
>INFO: Deploying configuration descriptor manager.xml
>Mar 18, 2012 5:46:41 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory docs
>Mar 18, 2012 5:46:41 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory ROOT
>Mar 18, 2012 5:46:41 PM org.apache.catalina.startup.HostConfig
>deployDirectory
>INFO: Deploying web application directory examples
>Mar 18, 2012 5:46:41 PM org.apache.jk.common.ChannelSocket init
>INFO: JK: ajp13 listening on /0.0.0.0:8009
>Mar 18, 2012 5:46:41 PM org.apache.jk.server.JkMain start
>INFO: Jk running ID=0 time=0/27  config=null
>Mar 18, 2012 5:46:41 PM org.apache.catalina.startup.Catalina start
>INFO: Server startup in 1034 ms
>---------------------------------------------------------------------
>
>------------------------------
>
>Message: 4
>Date: Sun, 18 Mar 2012 22:11:40 -0700
>From: Stephen Chan<sychan at lbl.gov>
>Subject: Re: changes in login pages - kills IDP?
>To: Shib Users<users at shibboleth.net>
>Message-ID:
><CA+n9YfpNOGtJ6Ogd5nNRu9EHtgmaQq=XmFVBdKQUXXBu=vA_qQ at mail.gmail.com>
>Content-Type: text/plain; charset="iso-8859-1"
>
>    Check the contents of /var/log/tomcat6/catalina.out
>    No doubt tomcat6 has left some complaints about the contents of the
>warfile.
>
>    Steve
>----------------
>
>  On Sun, Mar 18, 2012 at 5:47 PM, Oleg Chaikovsky<
>oleg.chaikovsky at aegisusa.net>   wrote:
>
>can't figure out where to look. Any help or pointers in the right
>direction would be great. RHEL 6, using TOmcat 6. We have followed all
>recommendations with the OS and JVM changes, and as I said it works
>great with the default login pages...
>------------------------------------------------
>
>  --
>Oleg Chaikovsky
>AegisUSA - The Identity Company
>303-222-1064
>714-742-2823 mobile
>http://www.aegisusa.com
>twitter- @aegisidentity
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net



More information about the users mailing list