IDP 2.3.6 Stops Sending SAML Responses.

[Montoya,Jose T]

:))
Well,
I did not do anything to the audit log file. Its sitting right there:
-rw-r--r--   1 shib shib    762354 May  1 16:56 idp-audit.log

Same location as the other files and it does not problems with those:
-rw-r--r--   1 shib shib 444383453 May  1 16:56 idp-process.log

It can't be a permissions issue since it writes to it fine until it locks up.
This is what the process looks like when its launched, excluding yourkit from the real production launch..

shib     22784 22783  8 16:37 ?        00:01:45 jsvc.exec -user shib -home /usr/java/latest -Dcatalina.home=/opt/tomcat -Dcatalina.base=/opt/tomcat -Djava.io.tmpdir=/var/tmp -Djava.endorsed.dirs=/opt/tomcat/endorsed -wait 10 -pidfile /var/run/tomcat.jsvc.pid -outfile /opt/tomcat/logs/catalina.out -errfile &1 -agentpath:/var/tmp/yjp-11.0.2/bin/linux-x86-64/libyjpagent.so -Xmx4G -Xms2G -XX:MaxPermSize=1G -cp /usr/java/latest/lib/tools.jar:/opt/tomcat/bin/commons-daemon.jar:/opt/tomcat/bin/bootstrap.jar org.apache.catalina.startup.Bootstrap

-Jose Montoya

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, May 01, 2012 4:47 PM
To: Shib Users
Subject: Re: IDP 2.3.6 Stops Sending SAML Responses.

On 5/1/12 5:41 PM, "Montoya,Jose T" <jtmontoya at mdanderson.org> wrote:

>Thanks for the suggestions.
>Using Yourkit I was able to obtain this a capture of a deadlocked thread.
>The idp-process.log does not seem to help in identifying what happens
>after its encoded the messages.

Maybe I'm confused, but that seems pretty self-explanatory to me, it looks
like your audit log sink is hung. That would certainly explain it. The
audit happens before completing the response, once the client's gone,
there's no more code running for that request so it has to finish logging
first.

What did you do to the audit log destination? It can't be nothing; the
default is to log to a file, and that works just fine.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net