Question About History of Shibboleth IDP MySQL Connector - log4j related

[Ullfig, Roberto Alfredo]

This came up because of log4j. We've been using the mysql connector for over a decade and it appears that the mechanics to implement it has changed over that time. Was mysql-connector-java an rpm that would have been required in the past? It appears that it installed log4j version 1. I just want to confirm that we can remove the mysql-connector-java rpm (to remove log4j) and that Shibboleth no longer requires that for the mysql connection. Our current connector looks like this:

    <DataConnector id="MySQL" xsi:type="RelationalDatabase" xmlns="urn:mace:shibboleth:2.0:resolver">
        <BeanManagedConnection>MySQLDataSource</BeanManagedConnection>
        <QueryTemplate>
            <![CDATA[
                SELECT * FROM user_attr WHERE user = '$resolutionContext.principal'
            ]]>
        </QueryTemplate>
...

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211214/71aaa0f4/attachment.htm>