Exception in native SP stop apache process

Cédric Couralet cedric.couralet at gmail.com
Wed Sep 4 03:51:10 EDT 2013


Hello,

I am using the Native Shibboleth SP with apache and sometimes the
apache process stop with that message :

[Mon Sep 02 07:58:14 2013] [error] [client 10.52.110.235]
shib_check_user threw an unknown exception!, referer:
https://idp.fr/idp/Authn/RemoteUser

Looking at shibd_warn.log, I see :

2013-09-02 07:58:14 ERROR Shibboleth.Listener [160]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [160]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [161]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [160]: I/O failure
processing request on socket (716)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [161]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [162]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [161]: I/O failure
processing request on socket (480)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [162]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [162]: I/O failure
processing request on socket (672)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [167]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [167]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [167]: I/O failure
processing request on socket (780)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [163]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [163]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [163]: I/O failure
processing request on socket (636)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [171]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [169]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [171]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [168]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [169]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [171]: I/O failure
processing request on socket (668)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [164]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [164]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [166]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [165]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [169]: I/O failure
processing request on socket (608)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [170]: error reading
size of input message
2013-09-02 07:58:14 ERROR Shibboleth.Listener [168]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [164]: I/O failure
processing request on socket (384)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [166]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [165]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [170]: socket call
resulted in error (0): No error
2013-09-02 07:58:14 ERROR Shibboleth.Listener [168]: I/O failure
processing request on socket (696)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [166]: I/O failure
processing request on socket (488)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [165]: I/O failure
processing request on socket (388)
2013-09-02 07:58:14 ERROR Shibboleth.Listener [170]: I/O failure
processing request on socket (548)

On apache logs, I see the user getting redirected to the IDP and then nothing :
10.52.110.235 - - [02/Sep/2013:07:58:13 +0200] "GET / HTTP/1.1" 301 249 0
10.52.110.235 - - [02/Sep/2013:07:58:13 +0200] "GET /something
HTTP/1.1" 302 737 0

Looking at the idp log, I see nothing unusual (the user is
authenticated and redirected towards the SP as all the other client).

That error happens approximately one time per week and force us to
restart apache.

Do you have any idea on where I could look to pinpoint the exact
problem (or better, solve it) ?

Versions :
Windows 2003 for both the SP and IDP.
shibboleth-identityprovider version 2.1.5.
shibboleth SP 2.4.3
Apache 2.2.20


More information about the users mailing list