Problem with tomcat hanging on Shib 2.4

Cantor, Scott cantor.2 at osu.edu
Fri Aug 29 14:40:06 EDT 2014


On 8/29/14, 2:10 PM, "John Kamminga" <jkamminga at ucmerced.edu> wrote:
>
>Scott, our traffic has increased and I'd like to explore the 'caching
>attribute resolution results for too long'. Where is this configured? In
>multiple places? And, what is the default that is shipped with Shibboleth
>Idp?

https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverRDBMSDataConne
ctor
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnec
tor

There are no defaults, none of the connectors in the example file matter
much to anybody running a real IdP.

If it's true that permgen space comes out of the same heap maximum, that's
news to me, but I run with
-Xmx768m -XX:MaxPermSize=512m and have never had a problem. I cache
connector results for a few minutes.

If you ever get an OutOfMemory error in the log, you don't need to waste
time looking for other explanations.

-- Scott



More information about the users mailing list