Very slow processing of attribute-filter.xml with many AttributeFilterPolicy elements

[Ian Young]

> On 28 Nov 2014, at 07:38, Lukas Hämmerle <lukas.haemmerle at switch.ch> wrote:
> 
> My colleague, Kaspar Brand, is having a closer look at the IdPv3. His
> results loading and processing the current SWITCH attribute-filter with
> about 6750 attribute rules are:
> - about 2mins with IdP v2.4.2
> - less than 5s with IdP v3.0.0-beta1
> 
> So, this looks quite promising for v3 but does of course not help much
> in the short term. So, we probably will have to implement some
> optimizations on our side anyways.

Yes, particularly if it needs to work for people running something other than the most recent version.

It's probably worth filing a JIRA case if you haven't already. I don't think we'd want to consider doing a V2 patch release for something like this, but there's always a possibility we'd look at it if we had to do one for some other reason. Of course, given the age of that stack (Spring 2.5, for example) it may not be fixable anyway.

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20141128/f3cda015/attachment-0001.bin