Idp v3.46 with Unicon's Shib-Redis storage service
Niva Agmon
niva.agmon at temple.edu
Wed Sep 16 13:29:54 UTC 2020
Is anyone using Redis for session storage?
We are looking to replace our Hazelcast session storage with Unicon's Shib-Redis, but are not able to make it work with either openJdk 8 or 11:
Our current environment is:
Shib idp v3.4.5
Running on RHEL 7 vm
Using Tomcat-9.0.37 and openJDK 1.8.0_262
Java 1.8.0_262 fails with a version mismatch:
...Error loading class [net.unicon.iam.shibboleth.storage.RedisStorageService] for bean with name 'my.RedisStorageService' defined in file [/opt/shibboleth-idp/system/conf/../../conf/global.xml]: problem with class file or dependent class; nested exception is java.lang.UnsupportedClassVersionError: net/unicon/iam/shibboleth/storage/RedisStorageService has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0 (unable to load class [net.unicon.iam.shibboleth.storage.RedisStorageService])
When upgrading to openJDK 11 there are warnings :
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.redisson.misc.URIBuilder (file:/opt/apache-tomcat-9.0.37/webapps/idp/WEB-INF/lib/redisson-3.10.1.jar) to field java.lang.reflect.Field.modifiers
WARNING: Please consider reporting this to the maintainers of org.redisson.misc.URIBuilder
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
But the IDP fails with this error:
2020-09-16 09:19:04,848 - ERROR [org.springframework.webflow.execution.ActionExecutionException:76] -
org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor at 38c6b0c5 in state 'SAML2SSOSecurityPolicy' of flow 'intercept/security-policy/saml2-sso' -- action execution attributes were 'map[[empty]]'
at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:62)
Caused by: java.lang.IllegalArgumentException: java.io.IOException: java.lang.RuntimeException: Class net.unicon.iam.shibboleth.storage.VersionMutableStorageRecord does not implement Serializable or externalizable
at org.redisson.RedissonObject.encodeMapValue(RedissonObject.java:290)
Caused by: java.io.IOException: java.lang.RuntimeException: Class net.unicon.iam.shibboleth.storage.VersionMutableStorageRecord does not implement Serializable or externalizable
at org.redisson.codec.FstCodec$2.encode(FstCodec.java:115)
Caused by: java.lang.RuntimeException: Class net.unicon.iam.shibboleth.storage.VersionMutableStorageRecord does not implement Serializable or externalizable
at org.nustaq.serialization.FSTClazzInfo.<init>(FSTClazzInfo.java:142)
2020-09-16 09:19:04,859 - WARN [net.shibboleth.ext.spring.error.ExtendedMappingExceptionResolver:136] - Resolved [org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor at 38c6b0c5 in state 'SAML2SSOSecurityPolicy' of flow 'intercept/security-policy/saml2-sso' -- action execution attributes were 'map[[empty]]'] to ModelAndView: reference to view with name 'error'; model is {exception=org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor at 38c6b0c5 in state 'SAML2SSOSecurityPolicy' of flow 'intercept/security-policy/saml2-sso' -- action execution attributes were 'map[[empty]]', request=org.apache.catalina.connector.RequestFacade at 40e3b6b, encoder=class net.shibboleth.utilities.java.support.codec.HTMLEncoder, springContext=Root WebApplicationContext: startup date [Wed Sep 16 09:16:55 EDT 2020]; root of context hierarchy}
Any hints greatly appreciated!
Thanks,
Niva Agmon
Temple University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200916/7f9bac88/attachment.htm>
More information about the users
mailing list