NettyConnection Warning

[Martin Hitschel]

Dear shib users,

we've encountered a set of strange LDAP-related warnings in our 
IdPv5.1.3 updated from a v3 config originally. Do you have a clue what 
is happening and how to fix this?

LDAP access is working actually, AACLI returns nice assertions including 
attributes from the AD.

Regards

Martin

2025-02-27 15:39:11,357 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:216] - Service 
'shibboleth.AttributeFilterService': Completing shutdown
2025-02-27 15:39:11,357 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:207] - Service 
'shibboleth.ClientInformationResolverService': Starting shutdown%
2025-02-27 15:39:11,357 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:216] - Service 
'shibboleth.ClientInformationResolverService': Completing shutdown
2025-02-27 15:39:11,361 -  - WARN 
[org.ldaptive.transport.netty.NettyConnection:1750] - Inbound handler 
caught exception for 
org.ldaptive.transport.netty.NettyConnection at 555837500::ldapUrl=[org.ldaptive.LdapURL at -31836592::scheme=ldaps, 
hostname=ad1.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
isOpen=false, connectTime=null, 
connectionConfig=[org.ldaptive.ConnectionConfig at 1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636 
ldaps://ad2.ad1.example-organization.edu:636 
ldaps://ad3.ad1.example-organization.edu:636, connectTimeout=PT3S, 
startTLSTimeout=PT3S, responseTimeout=PT30S, reconnectTimeout=PT10S, 
autoReconnect=true, autoReconnectCondition=ONE_RECONNECT_ATTEMPT, 
autoReplay=false, 
sslConfig=[org.ldaptive.ssl.SslConfig at 705004620::credentialConfig=[org.ldaptive.ssl.CredentialConfigFactory$2 at 373543608::trustCertificates=suppressed, 
authenticationCertificate=null, authenticationKey=null], 
trustManagers=null, hostnameVerifier=null, enabledCipherSuites=null, 
enabledProtocols=null, handshakeCompletedListeners=null, 
handshakeTimeout=PT1M], useStartTLS=false, 
connectionInitializers=[org.ldaptive.BindConnectionInitializer at 1468109482::bindDn=managerIDP at example-organization.edu, 
bindSaslConfig=null, 
bindControls=null],connectionStrategy=[org.ldaptive.ActivePassiveConnectionStrategy at 1666153340::ldapURLSet=[org.ldaptive.LdapURLSet at 766660255::active=[[org.ldaptive.LdapURL at -31836592::scheme=ldaps, 
hostname=ad1.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
[org.ldaptive.LdapURL at 1062507343::scheme=ldaps, 
hostname=ad2.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
[org.ldaptive.LdapURL at -2138116018::scheme=ldaps, 
hostname=ad3.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null]], 
inactive=[]], activateCondition=DEFAULT_ACTIVATE_CONDITION, 
retryCondition=DEFAULT_RETRY_CONDITION, initialized=true], 
connectionValidator=null, transportOptions={}], channel=null
io.netty.channel.unix.Errors$NativeIoException: recvAddress(..) failed: 
Connection reset by peer
2025-02-27 15:39:11,362 -  - WARN 
[org.ldaptive.transport.netty.NettyConnection:1750] - Inbound handler 
caught exception for 
org.ldaptive.transport.netty.NettyConnection at 337756356::ldapUrl=[org.ldaptive.LdapURL at -31836592::scheme=ldaps, 
hostname=ad1.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
isOpen=true, connectTime=2025-02-27T14:08:48.871325409Z, 
connectionConfig=[org.ldaptive.ConnectionConfig at 1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636 
ldaps://ad2.ad1.example-organization.edu:636 
ldaps://ad3.ad1.example-organization.edu:636, connectTimeout=PT3S, 
startTLSTimeout=PT3S, responseTimeout=PT30S, reconnectTimeout=PT10S, 
autoReconnect=true, autoReconnectCondition=ONE_RECONNECT_ATTEMPT, 
autoReplay=false, 
sslConfig=[org.ldaptive.ssl.SslConfig at 705004620::credentialConfig=[org.ldaptive.ssl.CredentialConfigFactory$2 at 373543608::trustCertificates=suppressed, 
authenticationCertificate=null, authenticationKey=null], 
trustManagers=null, hostnameVerifier=null, enabledCipherSuites=null, 
enabledProtocols=null, handshakeCompletedListeners=null, 
handshakeTimeout=PT1M], useStartTLS=false, 
connectionInitializers=[org.ldaptive.BindConnectionInitializer at 1468109482::bindDn=managerIDP at example-organization.edu, 
bindSaslConfig=null, bindControls=null], 
connectionStrategy=[org.ldaptive.ActivePassiveConnectionStrategy at 1666153340::ldapURLSet=[org.ldaptive.LdapURLSet at 766660255::active=[[org.ldaptive.LdapURL at -31836592::scheme=ldaps, 
hostname=ad1.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
[org.ldaptive.LdapURL at 1062507343::scheme=ldaps, 
hostname=ad2.ad1.example-organization.edu, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null], 
[org.ldaptive.LdapURL at -2138116018::scheme=ldaps, 
hostname=ad3.ad1.uni-stuttgart.de, port=636, baseDn=null, 
attributes=null, scope=null, filter=null, inetAddress=null]], 
inactive=[]], activateCondition=DEFAULT_ACTIVATE_CONDITION, 
retryCondition=DEFAULT_RETRY_CONDITION, initialized=true], 
connectionValidator=null, transportOptions={}], channel=[id: 0x08ccc8ee, 
L:/12.34.56.78:34567 - R:ad1.ad1.uni-stuttgart.de/12.34.56.78:636]
io.netty.channel.unix.Errors$NativeIoException: recvAddress(..) failed: 
Connection reset by peer
2025-02-27 15:39:11,446 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:207] - Service 
'shibboleth.AttributeResolverService': Starting shutdown
2025-02-27 15:39:11,447 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:216] - Service 
'shibboleth.AttributeResolverService': Completing shutdown
2025-02-27 15:39:11,449 -  - INFO 
[net.shibboleth.shared.service.AbstractReloadableService:207] - Service 
'shibboleth.MetadataResolverService': Starting shutdown




-- 

*Dr. MARTIN HITSCHEL | System Engineer*

Phone: +49 7071 407109-0
Email: martin.hitschel at daasi.de

*DAASI International GmbH*
Europaplatz 3
D-72072 Tübingen, Germany
www.daasi.de

Registered Office: Tübingen
Registration Court: Amtsgericht Stuttgart, HRB 382175
CEO: Peter Gietz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250227/00550eb3/attachment.htm>