High CPU usage when loading relying-party.xml

Leung, Warren wleung at it.ucla.edu
Wed Feb 18 19:50:02 EST 2015


Hi All,

We currently have our relying-party.xml configured to poll for changes.  We rarely make changes to our file except for times when we need to add a new RelyingParty for SP's that don't support encrypted asserts.  We never had a problem with this until recently when we tried to add a new one for the SP Zoom.  When the IdP reloads the file the CPU spikes to 100% and eventually we have to kill tomcat.  The configuration is below

         <rp:RelyingParty id="ucla.zoom.us"
                        provider="https://shbqa.ais.ucla.edu/idp/shibboleth"
                        defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"
                        defaultSigningCredentialRef="IdPCredential">
                        <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
                                                signResponses="never"
                                                signAssertions="always"
                                                encryptNameIds="never"
                                                encryptAssertions="never"
                                                includeAttributeStatement="true"/>
        </rp:RelyingParty>


I am also attaching the thread dump we took.

Thanks

Warren

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150219/15e7376f/attachment-0001.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: shibboleth-threaddump.txt
Url: http://shibboleth.net/pipermail/users/attachments/20150219/15e7376f/attachment-0001.txt 


More information about the users mailing list