ORA-08177: can't serialize access for this transaction

[Lionel Samuel]

We are recently on idp3.3.0 and enabled:

<!-- ==NameID== -->
      <resolver:AttributeDefinition id="NameID" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="eduPersonTargetedID">
              <resolver:Dependency ref="eduPersonTargetedID" />
              <resolver:AttributeEncoder xsi:type="SAML2StringNameID"

xmlns="urn:mace:shibboleth:2.0:attribute:encoder"

nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />
       </resolver:AttributeDefinition>

<!-- Targeted ID/Persistent ID -->
        <resolver:AttributeDefinition id="eduPersonTargetedID"
xsi:type="ad:SAML2NameID" sourceAttributeID="persistentID"

nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
            <resolver:Dependency ref="myStoredId" />
            <resolver:DisplayName xml:lang="en">Targeted
ID</resolver:DisplayName>
            <resolver:DisplayDescription xml:lang="en">Targeted ID: A
unique identifier for a person, different for each service
provider.</resolver:DisplayDescription>
            <resolver:AttributeEncoder xsi:type="enc:SAML2XMLObject"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID"
/>
        </resolver:AttributeDefinition>

<!-- StoredId -->
<resolver:DataConnector id="myStoredId" xsi:type="dc:StoredId"
generatedAttributeID="persistentID"
sourceAttributeID="%{idp.persistentId.sourceAttribute}"
salt="%{idp.persistentId.salt}" queryTimeout="0">
                <resolver:Dependency
ref="%{idp.persistentId.sourceAttribute}" />

<dc:BeanManagedConnection>OracleDataSource</dc:BeanManagedConnection>
            </resolver:DataConnector>

However -- receiving following occasional errors in idp-warn.log --- saw
the following on the wiki: "
http://shibboleth.1660669.n2.nabble.com/Error-obtaining-persistent-identifier-ORA-08177-can-t-serialize-access-for-this-transaction-td7628075.html"
-- Quite new to Shibboleth and I can't say I completely understand the
explanation in thread --- is it due to a race condition, what steps can
alleviate it?




2017-09-10 19:52:08,492 - ERROR
[net.shibboleth.idp.profile.impl.ResolveAttributes:299] - Profile Action
ResolveAttributes: Error resolving attributes
net.shibboleth.idp.attribute.resolver.ResolutionException:
org.opensaml.saml.common.SAMLException: ID storage error obtaining
persistent identifier
        at
net.shibboleth.idp.saml.attribute.resolver.impl.StoredIDDataConnector.doDataConnectorResolve(StoredIDDataConnector.java:236)
Caused by: org.opensaml.saml.common.SAMLException: ID storage error
obtaining persistent identifier
        at
net.shibboleth.idp.saml.nameid.impl.StoredPersistentIdGenerationStrategy.generate(StoredPersistentIdGenerationStrategy.java:178)
Caused by: java.io.IOException: java.sql.SQLException: ORA-08177: can't
serialize access for this transaction

        at
net.shibboleth.idp.saml.nameid.impl.JDBCPersistentIdStoreEx.getBySourceValue(JDBCPersistentIdStoreEx.java:629)
Caused by: java.sql.SQLException: ORA-08177: can't serialize access for
this transaction

        at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:445)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170910/b4565d32/attachment-0001.html>