Weird IdP Hanging Issue

[Royder, Kyle D]

I haven't had to mess with this before, but reading about it on the wiki, I'm assuming you're referring to the configurationResourcePollingFrequency attribute added to one of the four reloadable services in service.xml?

If so, it does look like this was setup to reload all four every 1 minute?  I don't want this turned on so I'm going to remove the configurationResourcePollingFrequency attribute from all four of these.  Hopefully this will resolve this issue.  The weird thing is that none of these configs have been changes in a couple of weeks and this just started over the past couple of days.

    <Service id="shibboleth.AttributeResolver"
             xsi:type="attribute-resolver:ShibbolethAttributeResolver"
             configurationResourcePollingFrequency="PT1M0.000S" >
        <ConfigurationResource file="/opt/shibboleth-idp/conf/attribute-resolver.xml" xsi:type="resource:FilesystemResource" />
    </Service>
    <Service id="shibboleth.AttributeFilterEngine"
             xsi:type="attribute-afp:ShibbolethAttributeFilteringEngine"
             configurationResourcePollingFrequency="PT1M0.000S" >
        <ConfigurationResource file="/opt/shibboleth-idp/conf/attribute-filter.xml" xsi:type="resource:FilesystemResource" />
    </Service>
    <Service id="shibboleth.RelyingPartyConfigurationManager"
             xsi:type="relyingParty:SAMLMDRelyingPartyConfigurationManager"
             depends-on="shibboleth.SAML1AttributeAuthority shibboleth.SAML2AttributeAuthority"
             configurationResourcePollingFrequency="PT1M0.000S" >
        <ConfigurationResource file="/opt/shibboleth-idp/conf/relying-party.xml" xsi:type="resource:FilesystemResource" />
    </Service>
    <Service id="shibboleth.HandlerManager"
             depends-on="shibboleth.RelyingPartyConfigurationManager"
             xsi:type="profile:IdPProfileHandlerManager"
             configurationResourcePollingFrequency="PT1M0.000S" >
        <ConfigurationResource file="/opt/shibboleth-idp/conf/handler.xml" xsi:type="resource:FilesystemResource" />
    </Service>

Thanks!
Kyle

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, March 21, 2013 12:43 PM
To: Shib Users
Subject: RE: Weird IdP Hanging Issue

> When this happens, you can still, very slowly get the authentication page and
> when you authenticate it just hangs.  The shibboleth logs show
> authentication successful but do not continue past that.  The logs become
> really thin instead of their usual chatter they usually just show the following.

That seems to point to attribute data connectors as being the most likely culprit.

Do you do any reloading of config files and is there any chance of that being connected?

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net