Spring LockTimeoutException?

[Jon Byers]

After reviewing some old emails, it appears that the SSL certificate for the ldap pool was changed from an enterprise CA certificate with the defined common name to a wildcard GoDaddy certificate.  When I use an ldap browser I get an error related to the certificate name not matching, which seems it would indicate the browser doesn't like the wildcard.  Any requirements/checking regarding the SSL certificate that I might be missing?


Thanks,
Jon

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, July 29, 2016 10:11 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Spring LockTimeoutException?

On 7/29/16 12:43 PM, Jon Byers wrote:
> I had this same issue when creating a new v3 IdP.  On our v2 system we use a
> ldaps:// connection to a load balancer with 4 global catalogs in the pool.
> The v2 system hasn't been touched in years and functions totally fine.

Well, it's not that simple. Aside from the obvious fact that the LDAP
code is different, V2 doesn't use SWF, so the "result" of the same
condition is going to be a hung request. I'm not aware of any systematic
way to identify the same situation.

> The v3 system seems to hang at least once on a daily basis, with only
> my testing being run against it.

Safe to say your LDAP connectivity is broken. I have issues with my LDAP
connectivity failing at times, but it doesn't hang. Hanging is always a
bug in some layer.

> Is there anything related to SSL that may cause this type of hang up?
> I haven't checked the load balancer settings, but if non SSL connections
> are working, I don't think it is related to the LB.

I would not agree with that conclusion.

-- Scott
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net