Jetty 11 is producing excessive number of threads

[Equbay Kiflay]

I managed to resolve my issue with fudiscr.
Thanks,
Equbay

On Thu, Oct 10, 2024 at 11:55 AM Equbay Kiflay <
equbay.kiflay at concordia.ab.ca> wrote:

> Hi Peter,
>
> I gave fudiscr a try following the documentation at
> https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr. In particular the
> section
> https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr#configuration_of_privacyidea
> for configuring  %{idp.home}/conf/authn/fudiscr.properties   . I
> configured, along with the other parameters in that file
>       fudiscr.privacyidea.base_uri=https://myprivacyidea.server.
> However, when I try to login I see the following error in the
> idp-process.log
>
>  ERROR [de.fu.dis.edumfa.client.AbstractEduMfaClient:188] -
> Connection/Request failed, URI: 'https://localhost/auth'
>
> So it looks like the plugin is ignoring my configuration and trying to
> connect to localhost. Unfortunately, there is no troubleshooting and I was
> not able to get anything on google search.
>
> Thanks,
> Equbay
>
> On Fri, Oct 4, 2024 at 2:28 PM Equbay Kiflay <
> equbay.kiflay at concordia.ab.ca> wrote:
>
>> Hi Peter,
>>
>> I will check out the fudiscr, I had looked at it at some point but found
>> it easier to focus on getting the PI plugin to work. I think it will be
>> worthwhile to take another look for the reason you mentioned as well.
>>
>> I have logged a bug report to the PI plugin devs meanwhile.
>>
>> @David Stava
>> The problem is with the plugin as Scott said. You can work around the
>> problem with huge RAM (I have /usr/bin/java -Xms8192m -Xmx14336m  ...) and
>> restart shibboleth every night late at night when nobody sees. That seem to
>> work for my environment.
>>
>> Equbay
>>
>> On Fri, Oct 4, 2024 at 11:36 AM Peter Schober via users <
>> users at shibboleth.net> wrote:
>>
>>> Cantor, Scott via users <users at shibboleth.net> [2024-10-04 18:37 CEST]:
>>> > > Doesn't sound like it will. I'd focus on getting a test running
>>> > > on "not Debian".
>>> >
>>> > Nope, don't waste the time, it's the PrivacyIdea plugin I'm afraid,
>>> > didn't want to leave this hanging and waste anyone's attention or
>>> > time.
>>> > [...]
>>> > I'm sure it's something obvious to its author, or will be in
>>> > hindsight once he takes a look.
>>>
>>> FWIW, there's a different plugin implementation available which may
>>> not suffer from this issue:
>>> https://doku.tid.dfn.de/de:shibidp:plugin-fudiscr
>>> (English version: https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr)
>>>
>>> It may not be trivial to rip out the PI plugin and add the fudiscr one
>>> (esp. since fudiscr seems to have a lot more functionality leading to
>>> additional configuration complexity) but maybe still worth trying.
>>> (You should still report the issue to the PI plugin devs, of course.)
>>>
>>> Trying the fudicr plugin instead may make more sense if you're
>>> considering the move to the recent PI fork, https://edumfa.io/ that's
>>> reportedly only supported by fudiscr but not by the plugin mentioned
>>> above.
>>>
>>> HTH,
>>> -peter
>>> --
>>> For Consortium Member technical support, see
>>> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>> --
>>
>> Equbay Kiflay <equbay.kiflay at concordia.ab.ca>
>>
>> IT Operations Coordinator
>>
>> Information Technology Services
>>
>> Toll-Free: +1 866 479 5200
>>
>> <https://concordia.ab.ca/>
>>
>> [image: Concordia University of Edmonton] <https://concordia.ab.ca/>
>>
>> concordia.ab.ca
>>
>>
>> [image: Concordia University of Edmonton Twitter]
>> <https://twitter.com/CUEdmonton> [image: Concordia University of
>> Edmonton Instagram] <https://instagram.com/cuedmonton/> [image:
>> Concordia University of Edmonton Facebook]
>> <https://facebook.com/CUEdmonton>
>>
>
>
> --
>
> Equbay Kiflay <equbay.kiflay at concordia.ab.ca>
>
> IT Operations Coordinator
>
> Information Technology Services
>
> Toll-Free: +1 866 479 5200
>
> <https://concordia.ab.ca/>
>
> [image: Concordia University of Edmonton] <https://concordia.ab.ca/>
>
> concordia.ab.ca
>
>
> [image: Concordia University of Edmonton Twitter]
> <https://twitter.com/CUEdmonton> [image: Concordia University of Edmonton
> Instagram] <https://instagram.com/cuedmonton/> [image: Concordia
> University of Edmonton Facebook] <https://facebook.com/CUEdmonton>
>


-- 

Equbay Kiflay <equbay.kiflay at concordia.ab.ca>

IT Operations Coordinator

Information Technology Services

Toll-Free: +1 866 479 5200

<https://concordia.ab.ca/>

[image: Concordia University of Edmonton] <https://concordia.ab.ca/>

concordia.ab.ca


[image: Concordia University of Edmonton Twitter]
<https://twitter.com/CUEdmonton> [image: Concordia University of Edmonton
Instagram] <https://instagram.com/cuedmonton/> [image: Concordia University
of Edmonton Facebook] <https://facebook.com/CUEdmonton>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241010/c814e61a/attachment.htm>