Migration issues with shibboleth.JPAStorageService to JDBCStorageService

[Ulf Seltmann]

Hallo all,

we still have to migrate from shibboleth.JPAStorageService to JDBCStorageService. I followed the docs[1], but now the
new datasets differ, so that existing entries are not valid anymore. This results in user consent to pop up again - and
some nasty json-parsing exceptions.

here are my database entries (test data - redacted)

table "storagerecords" with shibboleth.JPAStorageService:
select * from storagerecords

contextidexpiresvalueversion
582b114eedac80d76b557f2ec12ec85ed6b13096e7ceb85408b886b700a39344authn/MFA1.707.235.769.569164011
intercept/attribute-releasejohndoe:https://sp.example.com/shibboleth 164031
intercept/attribute-releasejohndoe:_key_idx 164041
582b114eedac80d76b557f2ec12ec85ed6b13096e7ceb85408b886b700a39344https://sp.example.com/shibboleth1.707.240.573.812164051
582b114eedac80d76b557f2ec12ec85ed6b13096e7ceb85408b886b700a39344_session1.707.236.969.578164063
https://sp.example.com/shibbolethsV1uW+rlsx/EqtSSo/xcDlGGj28=1.707.240.573.812164071

table "storagerecords" with JDBCStorageService:
select * from storagerecords

contextidexpiresvalueversion
1a2a26b6a4701699c8195c0a83cf567dc8dcdee7cf2d4db6e6690008af629103authn/MFA1.707.236.290.770{"id":"authn/MFA","ts":1707233890770,"princ":[{"AUTHRES":"{\"id\":\"authn/Password\",\"ts\":1707233879983,\"princ\":[{\"typ\":1,\"nam\":107},{\"typ\":3,\"nam\":200},{\"typ\":1,\"nam\":108},{\"LDAPN\":\"johndoe\",\"LDAPE\":{\"dn\":\"cn=johndoe,ou=Active,ou=User,o=hmt\"}},{\"U\":\"johndoe\"}]}"},{"typ":1,"nam":107},{"typ":3,"nam":200},{"typ":1,"nam":108},{"LDAPN":"johndoe","LDAPE":{"dn":"cn=johndoe,ou=Active,ou=User,o=hmt"}},{"U":"johndoe"},{"AUTHRES":"{\"id\":\"authn/fudiscr\",\"ts\":1707233890761,\"princ\":[{\"typ\":1,\"nam\":\"urn:de:zedat:fudis:SAML:2.0:ac:classes:CR\"},{\"TID\":\"TOTP00006415\"},{\"U\":\"johndoe\"}]}"},{"typ":1,"nam":"urn:de:zedat:fudis:SAML:2.0:ac:classes:CR"},{"TID":"TOTP00006415"}]}1
intercept/attribute-releasejohndoe:https://sp.example.com/shibboleth [{"id":301,"v":"x7wtAxaDrz4H9nu67g7puu14HK79scDoXKXNppyUJk8="},{"id":307,"v":"zRNaUun+RC3dpzUESFwn/AlGiTO1H9mZdMYD4rie91Y="},{"id":308,"v":"ONCCZMWPTk78Jpml0WHzawPTuyF0bFIVMy3xruXFeOo="},{"id":117,"v":"n1VnUiHwxN+01vGvHJiOf7ii+/ILLBcWm0X92gmgtro="},{"id":"mail","v":"RrBlcv7Mdg0vm/lA9Pw+qkUKJVYqS3kU+K29tVtxmfA="},{"id":"sn","v":"cxV005JLyQhM++fBupmPLfNzzBmJwgyunBsDy0sIGdg="},{"id":"uid","v":"S5Ui2yuQZoQuqVFmpaYVa5vRnjFPRaLqT/h4lwufHnw="}]1
intercept/attribute-releasejohndoe:_key_idx ["johndoe:https://sp.example.com/shibboleth"]1
1a2a26b6a4701699c8195c0a83cf567dc8dcdee7cf2d4db6e6690008af629103https://sp.example.com/shibboleth1.707.241.095.865net.shibboleth.idp.saml.session.SAML2SPSession:{"id":"https://sp.example.com/shibboleth","ts":1707233895865,"nam":"<saml2:NameID xmlns:saml2=\"urn:oasis:names:tc:SAML:2.0:assertion\" Format=\"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent\" NameQualifier=\"https://idp.example.com/shibboleth\" SPNameQualifier=\"https://sp.example.com/shibboleth\">sV1uW+rlsx/EqtSSo/xcDlGGj28=</saml2:NameID>","ix":"_adacc4a1bb07f7e448aea9c56be3be66","acs":"https://sp.example.com/Shibboleth.sso/SAML2/POST","slo":true}1
1a2a26b6a4701699c8195c0a83cf567dc8dcdee7cf2d4db6e6690008af629103_session1.707.237.490.779{"ts":1707233890779,"nam":"johndoe","v4":"172.17.5.1","flows":["authn/MFA"],"svcs":["https://sp.example.com/shibboleth"]}3
https://sp.example.com/shibbolethsV1uW+rlsx/EqtSSo/xcDlGGj28=1.707.241.095.8651a2a26b6a4701699c8195c0a83cf567dc8dcdee7cf2d4db6e6690008af629103,1


As you can see the value-field now holds a JSON object and is not compatible to the old values - whatever they
represent. 

Does anyone can explain / know how to fix this?

Thanks in advance
cheers

[1]: https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2989096970/JDBCStorageService
-- 
Ulf Seltmann
System-Administrator

Hochschule für Musik und Theater Leipzig
IT-Dienste
Grassistraße 8 | 04107 Leipzig
Tel.: +49 341 2144 681
ulf.seltmann at hmt-leipzig.de | www.hmt-leipzig.de


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240208/52ff981b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6575 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240208/52ff981b/attachment.p7s>