High CPU usage when loading relying-party.xml
Leung, Warren
wleung at it.ucla.edu
Wed Feb 18 19:50:02 EST 2015
Hi All,
We currently have our relying-party.xml configured to poll for changes. We rarely make changes to our file except for times when we need to add a new RelyingParty for SP's that don't support encrypted asserts. We never had a problem with this until recently when we tried to add a new one for the SP Zoom. When the IdP reloads the file the CPU spikes to 100% and eventually we have to kill tomcat. The configuration is below
<rp:RelyingParty id="ucla.zoom.us"
provider="https://shbqa.ais.ucla.edu/idp/shibboleth"
defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"
defaultSigningCredentialRef="IdPCredential">
<rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
signResponses="never"
signAssertions="always"
encryptNameIds="never"
encryptAssertions="never"
includeAttributeStatement="true"/>
</rp:RelyingParty>
I am also attaching the thread dump we took.
Thanks
Warren
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150219/15e7376f/attachment-0001.html
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: shibboleth-threaddump.txt
Url: http://shibboleth.net/pipermail/users/attachments/20150219/15e7376f/attachment-0001.txt
More information about the users
mailing list