Error invoking Velocity template

[Brent Putman]

On 1/15/20 12:21 PM, dhina wrote:
> We have a user who has issue accessing services using shibboleth IDP(3.1.x).
> No other users have this issue. I don't see anything out of the ordinary in
> Active Directory for this user.
>
The error is puzzling, I don't personally off-hand remember anything 
like it.  But the first thing to do is get your IdP updated to a 
supported version. 3.1.x is years old and is no longer supported. 
Update to the latest version 3.4.6. If the problem persists in the 
latest version, then we can look into it in detail.  This may be a bug 
that has long since been fixed in a subsequent release.

Also, the root cause is actually this:

> 2020-01-15 09:01:00,934 - ERROR
> [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:175] - Error
> invoking Velocity template
> java.io.IOException: Response header too large
>          at
> org.eclipse.jetty.http.HttpGenerator.generateResponse(HttpGenerator.java:400)
> Caused by: java.nio.BufferOverflowException: null
>          at java.nio.Buffer.nextPutIndex(Buffer.java:521)

That directly involves Jetty, it is the software that is throwing.  
Since you are on a very old and unsupported IdP version, I'd also check 
your Jetty version and update if necessary.  This might very well be a 
Jetty bug.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200115/ec49c74a/attachment.html>