Abnormally high CPU for Shibboleth SP module in IIS

[Nate Klingenstein]

I don't have the complete details on the version of Windows in use or whether the April updates have been applied, but we're experiencing similar looping behavior(reported in particular with AAD IdP's for some reason) with one of our clients.  They're having orthogonal shibd load problems that we'll be able to ablate with some deployment and configuration changes.

I saw nothing unusual in the AAD metadata for one of the IdP's, but have yet to get a chance to inspect an assertion.  The deployment is of such a nature that I can't move shibd's logging to DEBUG in the production environment, so I haven't been able to look at exactly what's occurring.  I may be able to once we resolve the other issues associated with excessive shibd load, but for now, I can't take that risk.

If you find out any more, please take the time to inform the list.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id

-----Original message-----
From: Cantor, Scott
Sent: Tuesday, May 4 2021, 2:47 pm
To: Shib Users
Subject: Re: Abnormally high CPU for Shibboleth SP module in IIS

The module runs inside IIS, so it can't consume CPU in and of itself. If you mean shibd, then there'd be plenty of logs indicating what it might be up to, at least on DEBUG.

You make it sound like it's just doing work issuing AuthnRequests due to access to a protected URL, which a) doesn't normally consume a ton of CPU as far as I know and b) is an external factor; the SP doesn't just talk to itself and cause any activity like that. If something's banging on the web server, then it would have to be traced back to the source(s) accessing the protected resource.

-- Scott

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg <https://wiki.shibboleth.net/confluence/x/coFAAg>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>