Shibb IDP issue

Sathyaprasad, Sandeep (NIH/CIT) [C] sathyaprasads at mail.nih.gov
Wed Nov 8 20:39:26 UTC 2023


Hello,

 We have 4 shib idp servers and 2 active and 2 passive on windows 2016. Yesterday evening we started seeing issues in all 4 servers at the same time.

 We saw below error in tomcat std error logs, where idp is deployed
   javax.naming.NamingException: LDAP response read timed out, timeout used: 1000 ms.
at java.naming/com.sun.jndi.ldap.LdapRequest.getReplyBer(LdapRequest.java:129)
at java.naming/com.sun.jndi.ldap.Connection.readReply(Connection.java:443)
at java.naming/com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:365)

 and in the browser, we started seeing 404 error for below url
    processed redirect from query:https://federation.nih.gov/idp/profile/SAML2/Unsolicited/SSO?providerId=xxxx

We fixed it by reinstall/repairing the shibboleth Idp4.3.11. We are baffled why this issue happened how it got fixed after reinstalling the binaries.
DId any one faced this kind of issue before? What might have caused the issue?

Thanks,
Sandeep
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231108/2a7093a1/attachment.htm>


More information about the users mailing list