timeouts in jaas.config

Thu Oct 22 17:48:48 UTC 2020

In those cases, if you have two separate login modules in *separate* JAAS configuration sections, and the IdP is configured to run both using the non-default settings to tell it which ones to use, it will run both in a "try until one succeeds" fashion in V3. I ran that way for many years, so I'm very familiar with the behavior. If it's not trying the second one, you don't in fact have it set up that way.

-- Scott

On 10/22/20, 1:41 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

    13:22:11:543  INFO [137.229.114.251] net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:255 >  Profile Action ValidateUsernamePasswordAgainstJAAS: Login by 'dberry9' via 'ShibUserPassAuth' failedjavax.security.auth.login.LoginException: Authentication failed: [org.ldaptive.auth.AuthenticationResponse at 1572247851::authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE, ldapEntry=[dn=CN=dberry9,OU=userAccounts,DC=ua,DC=ad,DC=alaska,DC=edu[]], accountState=null, result=false, resultCode=LDAP_TIMEOUT, message=javax.naming.NamingException: LDAP response read timed out, timeout used:3000ms., controls=null]        at org.ldaptive.jaas.LdapLoginModule.login(LdapLoginModule.java:160)

    17:46:24:316  INFO [204.90.98.254] net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:255 >  Profile Action ValidateUsernamePasswordAgainstJAAS: Login by 'mcampbell10' via 'ShibUserPassAuth' failedjavax.security.auth.login.LoginException: Authentication failed: [org.ldaptive.auth.AuthenticationResponse at 1668002417::authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE, ldapEntry=[dn=CN=mcampbell10,OU=userAccounts,DC=ua,DC=ad,DC=alaska,DC=edu[]], accountState=null, result=false, resultCode=LDAP_TIMEOUT, message=javax.naming.NamingException: LDAP response read timed out, timeout used:3000ms., controls=null]        at org.ldaptive.jaas.LdapLoginModule.login(LdapLoginModule.java:160)