Jetty 11 is producing excessive number of threads

[Equbay Kiflay]

Hi Peter,

I gave fudiscr a try following the documentation at
https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr. In particular the
section
https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr#configuration_of_privacyidea
for configuring  %{idp.home}/conf/authn/fudiscr.properties   . I
configured, along with the other parameters in that file
      fudiscr.privacyidea.base_uri=https://myprivacyidea.server.
However, when I try to login I see the following error in the
idp-process.log

 ERROR [de.fu.dis.edumfa.client.AbstractEduMfaClient:188] -
Connection/Request failed, URI: 'https://localhost/auth'

So it looks like the plugin is ignoring my configuration and trying to
connect to localhost. Unfortunately, there is no troubleshooting and I was
not able to get anything on google search.

Thanks,
Equbay

On Fri, Oct 4, 2024 at 2:28 PM Equbay Kiflay <equbay.kiflay at concordia.ab.ca>
wrote:

> Hi Peter,
>
> I will check out the fudiscr, I had looked at it at some point but found
> it easier to focus on getting the PI plugin to work. I think it will be
> worthwhile to take another look for the reason you mentioned as well.
>
> I have logged a bug report to the PI plugin devs meanwhile.
>
> @David Stava
> The problem is with the plugin as Scott said. You can work around the
> problem with huge RAM (I have /usr/bin/java -Xms8192m -Xmx14336m  ...) and
> restart shibboleth every night late at night when nobody sees. That seem to
> work for my environment.
>
> Equbay
>
> On Fri, Oct 4, 2024 at 11:36 AM Peter Schober via users <
> users at shibboleth.net> wrote:
>
>> Cantor, Scott via users <users at shibboleth.net> [2024-10-04 18:37 CEST]:
>> > > Doesn't sound like it will. I'd focus on getting a test running
>> > > on "not Debian".
>> >
>> > Nope, don't waste the time, it's the PrivacyIdea plugin I'm afraid,
>> > didn't want to leave this hanging and waste anyone's attention or
>> > time.
>> > [...]
>> > I'm sure it's something obvious to its author, or will be in
>> > hindsight once he takes a look.
>>
>> FWIW, there's a different plugin implementation available which may
>> not suffer from this issue:
>> https://doku.tid.dfn.de/de:shibidp:plugin-fudiscr
>> (English version: https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr)
>>
>> It may not be trivial to rip out the PI plugin and add the fudiscr one
>> (esp. since fudiscr seems to have a lot more functionality leading to
>> additional configuration complexity) but maybe still worth trying.
>> (You should still report the issue to the PI plugin devs, of course.)
>>
>> Trying the fudicr plugin instead may make more sense if you're
>> considering the move to the recent PI fork, https://edumfa.io/ that's
>> reportedly only supported by fudiscr but not by the plugin mentioned
>> above.
>>
>> HTH,
>> -peter
>> --
>> For Consortium Member technical support, see
>> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
>
> Equbay Kiflay <equbay.kiflay at concordia.ab.ca>
>
> IT Operations Coordinator
>
> Information Technology Services
>
> Toll-Free: +1 866 479 5200
>
> <https://concordia.ab.ca/>
>
> [image: Concordia University of Edmonton] <https://concordia.ab.ca/>
>
> concordia.ab.ca
>
>
> [image: Concordia University of Edmonton Twitter]
> <https://twitter.com/CUEdmonton> [image: Concordia University of Edmonton
> Instagram] <https://instagram.com/cuedmonton/> [image: Concordia
> University of Edmonton Facebook] <https://facebook.com/CUEdmonton>
>


-- 

Equbay Kiflay <equbay.kiflay at concordia.ab.ca>

IT Operations Coordinator

Information Technology Services

Toll-Free: +1 866 479 5200

<https://concordia.ab.ca/>

[image: Concordia University of Edmonton] <https://concordia.ab.ca/>

concordia.ab.ca


[image: Concordia University of Edmonton Twitter]
<https://twitter.com/CUEdmonton> [image: Concordia University of Edmonton
Instagram] <https://instagram.com/cuedmonton/> [image: Concordia University
of Edmonton Facebook] <https://facebook.com/CUEdmonton>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241010/2ccefa69/attachment.htm>