Shibboleth IdP freezing issue

[Feinstein, Moses]

Hi Scott,

Thank you for your insights. Currently, our Shibboleth IdP is integrated with CAS (Unicon / shib-cas-authn3) as part of authentication flow, which ties us to using server side session storage, based on what is currently stated in the Shibboleth documentation. 

Would you recommend any alternatives to our current setup (We have several clients that integrate directly with the CAS protocol)




Moses Feinstein
Sr. Software / IAM Engineer, App Dev Dept
Emaill: moses.feinstein at touro.edu


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Wednesday, October 21, 2020 4:31 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Shibboleth IdP freezing issue

External Email

The first error has nothing to do with anything freezing or with any database, that's just back button. Trigger it yourself.

The second is probably related, and I wouldn't know anything about making a databse work. There's a reason the default is client side storage.

Other than "stop trying to use a database", or maybe twiddling with the retryable error settings to get it to retry transactions, no idea. If it's hung, then it's not going to help to be retrying errors, that will just cause more backlog.

The reason you don't see any deadlocks is that the error message is not true. Databases don't actually take locks anymore, they just detect dirty operations and then claim a "deadlock" when that isn't at all what a deadlock is. When a DBA, who does know, assumes the error isn't nonsense, they go looking for actual deadlocked connections in the database and none are there. That isn't really what's going on, it's just the database not honoring the isolation level properly.

But as to why it's hung, that would tend to mean a bad driver.

-- Scott


--
For Consortium Member technical support, see https://urldefense.com/v3/__https://wiki.shibboleth.net/confluence/x/coFAAg__;!!HoV-yHU!6GSjoHXkqQXgXW-s5RQoOmP2SoN1Z-bxXfYcKDsCprKQuqGQw4qWwDImH_QspaatER5n4A$
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net