java.sql.SQLException: Data source is closed after reload of shibboleth.AttributeResolverService

[Tibor Rudas]

Dear all!

In the process of migrating from our V2 IDP to V3 I am currently trying
to get a stable legacy-config version to run before I try to switch to
the new config.

Our setup is tomcat8/openjdk1.8.0 behind apache (ajp) (which - I know -
is in every step the not recommended but still supported component...)

In principle this is working OK (a few warnings and deprecation messages
aside). aacli.sh and a test SP are working OK.

I am now experiencing the following problem: There are two JNDI
Datasources configured (one for attribute lookup and one for storage of
persistent identifiers) to connect to an Oracle database.
These connections work fine on startup and continue to work until the
AttributeResolverService is reloaded (either manually or by changing the
attribute resolution and waiting for the scheduled reload). After the
reload these Datasources seem to no longer work:

2017-06-20 15:46:56,744 - ERROR
[net.shibboleth.idp.profile.impl.ResolveAttributes:299] - Profile Action
ResolveAttributes: Error resolving attributes
net.shibboleth.idp.attribute.resolver.ResolutionException:
org.opensaml.saml.common.SAMLException: ID storage error obtaining
persistent identifier
        at
net.shibboleth.idp.saml.attribute.resolver.impl.StoredIDDataConnector.doDataConnectorResolve(StoredIDDataConnector.java:236)
Caused by: org.opensaml.saml.common.SAMLException: ID storage error
obtaining persistent identifier
        at
net.shibboleth.idp.saml.nameid.impl.StoredPersistentIdGenerationStrategy.generate(StoredPersistentIdGenerationStrategy.java:178)
Caused by: java.io.IOException: java.sql.SQLException: Data source is closed
        at
net.shibboleth.idp.saml.nameid.impl.JDBCPersistentIdStoreEx.getBySourceValue(JDBCPersistentIdStoreEx.java:629)
Caused by: java.sql.SQLException: Data source is closed
        at
org.apache.tomcat.dbcp.dbcp2.BasicDataSource.createDataSource(BasicDataSource.java:2015)

The "Data source is closed" seeming the important part to me.

I would be grateful for any pointers to where the problem in my config
could be.

kind regards,
Tibor Rudas