On Tue, Sep 20, 2011 at 10:14 AM, Mark Cairney <span dir="ltr"><<a href="mailto:Mark.Cairney@ed.ac.uk">Mark.Cairney@ed.ac.uk</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi,<br>
<br>
Today our Shibboleth IdP stopped speaking to our OpenLDAP server.<br>
Upgrading to the latest release of Shib (2.3.3) appeared to have fixed<br>
it but we're now starting to see Connection timeouts on the LDAP side<br>
and attributes not being returned on the Shibboleth side.<br>
<br>
On the OpenLDAP side we're seeing:<br>
<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 fd=32 ACCEPT from<br>
IP=xxxxxxxx:59084 (IP=xxxxxxxx:636)<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 fd=32 TLS established<br>
tls_ssf=128 ssf=128<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 op=0 BIND dn="" method=128<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 op=0 RESULT tag=97 err=0<br>
text=<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 op=1 SRCH<br>
base="ou=people,ou=central,dc=authorise,dc=ed,dc=ac,dc=uk" scope=2<br>
deref=3 filter="(uid=******)"<br>
Sep 20 14:54:33 alder slapd[28855]: conn=1430 op=1 SRCH attr=uid<br>
eduPersonAffiliation eduPersonEntitlement eduniIdmsID mail givenName sn<br>
Sep 20 14:54:38 alder slapd[28855]: conn=1430 op=1 SEARCH RESULT tag=101<br>
err=3 nentries=0 text=<br>
Sep 20 14:54:38 alder slapd[28855]: conn=1430 op=2 UNBIND<br>
Sep 20 14:54:38 alder slapd[28855]: conn=1430 fd=32 closed<br>
<br></blockquote><div><br></div><div>Looks like a TimeLimitExceededException was thrown? Does your idp log confirm that?</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div>