<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">shib-users:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Over the past couple of days, our Shibboleth production machines have been hanging and will sometimes correct themselves and sometimes require tomcat to be restarted. Catalina.out doesn’t provide anything helpful other than SEVERE level
errors when shutting Shibboleth down.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">SEVERE: A web application created a ThreadLocal with key of type …..<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As far as I understand it from searching the archives, this is OK as long as it is occurring when you are shutting he container down.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The idp-process.log shows nothings as well with the followings log levels set:<o:p></o:p></p>
<p class="MsoNormal">edu.internet2.middleware.shibboleth=”DEBUG"<o:p></o:p></p>
<p class="MsoNormal">org.opensaml="WARN" <o:p></o:p></p>
<p class="MsoNormal">edu.vt.middleware.ldap="INFO"<o:p></o:p></p>
<p class="MsoNormal">edu.internet2.middleware.shibboleth.idp.authn="DEBUG"<o:p></o:p></p>
<p class="MsoNormal">PROTOCOL_MESSAGE="DEBUG"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I figure edu.internet2.middleware.shibboleth would be the important one.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When this happens, you can still, very slowly get the authentication page and when you authenticate it just hangs. The shibboleth logs show authentication successful but do not continue past that. The logs become really thin instead of
their usual chatter they usually just show the following.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:12:02.131 - INFO [Shibboleth-Access:74] - 20130321T171202Z|IP_ADDRESS|idp.its.utexas.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:09.404 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:134] - Redirecting to login page /login.jsp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.868 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAM<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">L2/Redirect/SSO<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.869 - INFO [Shibboleth-Access:74] - 20130321T171341Z|IP_ADDRESS|idp.its.utexas.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.870 - INFO [Shibboleth-Access:74] - 20130321T171341Z|IP_ADDRESS|idp.its.utexas.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.869 - INFO [Shibboleth-Access:74] - 20130321T171341Z|IP_ADDRESS|idp.its.utexas.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.869 - INFO [Shibboleth-Access:74] - 20130321T171341Z|IP_ADDRESS|idp.its.utexas.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">12:13:41.869 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAM<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">L2/Redirect/SSO<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I don’t see any errors and if I restart tomcat, it starts churning again. It’s possible that if left alone, it also ends up getting going again.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there any place else too look to see what’s causing this?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for any help.<o:p></o:p></p>
<p class="MsoNormal">Kyle<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>