ERROR org.opensaml.storage.impl.JPAStorageService:337

[Cantor, Scott]

> Setting id="shibboleth.authn.Password.Lowercase" to TRUE in
> authn/password-authn-config.xml seems to be a workaround for this.

Not establishing a consistent username after authentication can cause a lot of problems, so that's hardly just a workaround, but that said, this seems like a bug in the storage service.

> We've also seen multiple broken jdbc-connection pools, I've tested
> at least Hikari and c3p0 and they both seem to "die" eventually.

dbcp is by far the most consistent pooling library in my experience, and c3p0 is unusable. It has leaked memory for years.

> Also tomcat filedescriptor usage seems to increase over time, maybe these uncaught
> jdbc exceptions leak connections/descriptors ?

They don't look uncaught to me if they're being logged.

-- Scott