Question About History of Shibboleth IDP MySQL Connector - log4j related

Ullfig, Roberto Alfredo rullfig at
Tue Dec 14 15:19:38 UTC 2021

This came up because of log4j. We've been using the mysql connector for over a decade and it appears that the mechanics to implement it has changed over that time. Was mysql-connector-java an rpm that would have been required in the past? It appears that it installed log4j version 1. I just want to confirm that we can remove the mysql-connector-java rpm (to remove log4j) and that Shibboleth no longer requires that for the mysql connection. Our current connector looks like this:

    <DataConnector id="MySQL" xsi:type="RelationalDatabase" xmlns="urn:mace:shibboleth:2.0:resolver">
                SELECT * FROM user_attr WHERE user = '$resolutionContext.principal'

Roberto Ullfig - rullfig at
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list