ResolverScriptAttributeDefinition with jruby1.7.3 and idp-2.4.0

[Francesco Malvezzi]

good morning,

If I understood right, shibboleth-idp 2.4.0 does not need anymore to
bridge execution of scripting languages in ScriptAttribute with jsr223.
So for example the jars like: jruby-engine-20080611.jar are not
included, and everythings simply works by dropping the jruby.jar in the
expanded source lib directory.

However, after upgrading to idp-2.4.0, I have noticed that now,
sometimes, randomly, some scripted attribute definitions fail with a
javax.script.ScriptException like:

10:19:50.555 - ERROR
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition:135]
- ScriptletAttributeDefinition x500CF unable to execute script
javax.script.ScriptException: org.jruby.embed.EvalFailedException:
(NoMethodError) undefined method `user_session' for nil:NilClass
[...]

(if I try to reproduce it in aacli.sh, no problem; the same user can
repeat login and maybe it works).

The scripts are unchanged since idp-2.4.8 where they worked all the times.

My question is whether I am using a wrong version combo:
Linux idp2 2.6.32-5-amd64 #1 SMP Sun Sep 23 10:07:46 UTC 2012 x86_64
GNU/Linux

./bin/version.sh
shibboleth-identityprovider version 2.4.0

java -version
java version "1.6.0_27"
OpenJDK Runtime Environment (IcedTea6 1.12.5) (6b27-1.12.5-1)
OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)

jruby-1.7.3

Does anybody use this very same package/jar/java version? Are you
experiencing the same issue?

Can you point me to a working/trusted mix of version (maybe I could also
switch to groovy, or at the very worst to ECMAScript)?

thank you,

Francesco