<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR-CH" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Dear Commnunity,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I am running a single IDP 3.1.1 on Debian Jessie, Tomcat 7:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">### Operating Environment Information<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system: Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system_version: 3.16.0-4-amd64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system_architecture: amd64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">jdk_version: 1.7.0_79<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">available_cores: 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">used_memory: 553 MB<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">maximum_memory: 592 MB<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">### Identity Provider Information<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">idp_version: 3.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Users encounter from time to time log responses between authentication and connection to the SP. The idp-process.log shows series of succeeded authentication, ERROR, and series of audit:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:40:58,994 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:05,936 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:08,192 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:22,917 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:25,826 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user4<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:26,072 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication failed for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:30,434 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication failed for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:34,637 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:37,336 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:38,705 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:40,794 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user7<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:43,278 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user8<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:43,336 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:45,687 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user10<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:48,175 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,847 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,889 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,877 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,892 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://bgershop.staempfli.com/shibboleth|user10<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,898 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user7<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,901 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user4<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,913 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,916 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,918 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,925 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user8<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The idp server is not loaded.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Details of the ERROR LockTimeoutException:76:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:46,398 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">org.springframework.webflow.conversation.impl.LockTimeoutException: Unable to acquire conversation lock after 30 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.springframework.webflow.conversation.impl.JdkConcurrentConversationLock.lock(JdkConcurrentConversationLock.java:44)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:53,129 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">org.springframework.webflow.conversation.impl.LockTimeoutException: Unable to acquire conversation lock after 30 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.springframework.webflow.conversation.impl.JdkConcurrentConversationLock.lock(JdkConcurrentConversationLock.java:44)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:54,340 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:256] - Profile Action ResolveAttributes: Error resolving attributes<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">net.shibboleth.idp.attribute.resolver.ResolutionException: org.opensaml.saml.common.SAMLException: ID storage error retrieving persistent identifier<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.attribute.resolver.impl.StoredIDDataConnector.doDataConnectorResolve(StoredIDDataConnector.java:167)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: org.opensaml.saml.common.SAMLException: ID storage error retrieving persistent identifier<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.nameid.impl.StoredPersistentIdGenerationStrategy.generate(StoredPersistentIdGenerationStrategy.java:126)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.io.IOException: org.apache.commons.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.nameid.impl.JDBCPersistentIdStore.getActiveEntry(JDBCPersistentIdStore.java:415)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: org.apache.commons.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:116)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.util.NoSuchElementException: Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:1174)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:54,993 - ERROR [net.shibboleth.idp.consent.flow.ar.AbstractAttributeReleaseAction:150] - Profile Action PopulateAttributeReleaseContext: Unable to locate attribute context<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Some ideas ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks’ for help<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New";mso-fareast-language:FR-CH">Jacques Tissot
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New";mso-fareast-language:FR-CH">Université de Fribourg
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New";mso-fareast-language:FR-CH">Switzerland<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>