java heap problem since upgrading to IdP 3.2.1

[Liam Hoekenga]

On Tue, Jul 19, 2016 at 9:55 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> Are you using CAS or Logout (the latter shouldn't require that)? If not,
> any particular reason for using it? But I know Marvin certainly has been
> using it, obviously, so I doubt it leaks.
>

Clustered stateful sessions.

We have interest in logout, but haven't deployed those configuration
changes in prod.


> But I don't have any experience with the JPA storage option.
>

We're accessing JPAStorageService via hikari:

    <bean id="shibboleth.JPAStorageService.DataSource"
        class="com.zaxxer.hikari.HikariDataSource" destroy-method="close"
lazy-init="true"
        p:driverClassName="com.mysql.jdbc.Driver"
        p:jdbcUrl="jdbc:mysql://
mysql.example.edu:3306/shibboleth_qa?autoReconnect=true"
        p:username="shibboleth"
        p:password="PASSWORD" />


> Plenty of people that aren't me are using it, so without it being an
> OpenJDK issue, I still doubt that's the problem.
>
> Any sign of something causing the context in Tomcat be to redeployed while
> running? Tomcat leaks like a sieve, or used to, when that was done.
>

I don't think I'm seeing that in the tomcat logs.  I feel like since we
upgraded to java 1.8.0_92 and tomcat 8.0.35, that we're seeing fun new
errors like:

13-Jul-2016 18:32:31.068 INFO [ajp-apr-127.0.0.1-8009-exec-8]
org.apache.tomcat.util.http.LegacyCookieProcessor.processCookieHeader
Cookies: Invalid cookie. Value not a to
ken or quoted value
Note: further occurrences of Cookie errors will be logged at DEBUG level.
16-Jul-2016 19:11:16.806 INFO [ajp-apr-127.0.0.1-8009-exec-6]
org.apache.tomcat.util.http.LegacyCookieProcessor.processCookieHeader
Cookies: Unknown Special Cookie
Note: further occurrences of Cookie errors will be logged at DEBUG level
and

19-Jul-2016 00:05:56.996 SEVERE [ajp-apr-127.0.0.1-8009-exec-3]
org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() for
servlet [RemoteUserAuthHandler]
in context with path [/idp] threw exception [Error processing external
authentication request] with root cause
net.shibboleth.idp.authn.ExternalAuthenticationException: No conversation
state found in session for key (e1s1)

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160719/93244d53/attachment.html>