Problem with tomcat hanging on Shib 2.4

[Cantor, Scott]

On 8/29/14, 3:21 PM, "Brian Koehmstedt" <bkoehmstedt at ucmerced.edu> wrote:
>
>I will say there is a small amount of "custom" Java code called as
>Script from an attribute-resolver to generate targeted IDs on a
>per-service basis.  I immediately jumped to this as a possibility, and
>I've code-reviewed it and see no evidence of caching.  i.e., I was
>thinking maybe I was caching the targetedIds in a hash table, but as I
>review this code, I do not indeed do any caching of these IDs.
>(targetedId is essentially a salted hash of primary identifier and
>service id).

Hash-based generation like that is built-in to the IdP, so I'm not sure
why a script would be needed, but FWIW I use a few scripts, maybe 3-4 of
them run on any given login. So the script engine itself isn't leaking.

-- Scott