<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR-CH" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Dear Community, especially those who answered to my problem,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">The problem solved from itself when I cut off the remote PSQL database (with replication on the two IDP servers) by simply link it locally. Something had to be wrong with the replication. Nothing
to do with the DNS RoundRobin. It could cause problems somehow, but not in that case.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I have to tune better the replication of my postgres database.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Thanks to all<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">J. Tissot<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:FR-CH">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:FR-CH"> users
[mailto:users-bounces@shibboleth.net] <b>On Behalf Of </b>TISSOT Jacques<br>
<b>Sent:</b> mardi 8 septembre 2015 16:52<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Too long conversations between IDP and SP<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Dear Commnunity,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I am running a single IDP 3.1.1 on Debian Jessie, Tomcat 7:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">### Operating Environment Information<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system: Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system_version: 3.16.0-4-amd64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">operating_system_architecture: amd64<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">jdk_version: 1.7.0_79<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">available_cores: 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">used_memory: 553 MB<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">maximum_memory: 592 MB<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">### Identity Provider Information<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">idp_version: 3.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Users encounter from time to time log responses between authentication and connection to the SP. The idp-process.log shows series of succeeded authentication, ERROR, and series of audit:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:40:58,994 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:05,936 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:08,192 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:22,917 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:25,826 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user4<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:26,072 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication failed for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:30,434 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication failed for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:34,637 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:37,336 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:38,705 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:40,794 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user7<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:43,278 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user8<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:43,336 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:45,687 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: user10<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:48,175 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,847 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,889 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,877 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,892 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://bgershop.staempfli.com/shibboleth|user10<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,898 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user7<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,901 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user4<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,913 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user9<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,916 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://moodle2.unifr.ch/shibboleth|user1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,918 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:41:49,925 - INFO [Shibboleth-Audit.SSO:241] - 20150908T074149Z|https://www.unifr.ch/shibboleth|user8<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The idp server is not loaded.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Details of the ERROR LockTimeoutException:76:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:46,398 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">org.springframework.webflow.conversation.impl.LockTimeoutException: Unable to acquire conversation lock after 30 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.springframework.webflow.conversation.impl.JdkConcurrentConversationLock.lock(JdkConcurrentConversationLock.java:44)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:53,129 - ERROR [org.springframework.webflow.conversation.impl.LockTimeoutException:76] -
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">org.springframework.webflow.conversation.impl.LockTimeoutException: Unable to acquire conversation lock after 30 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.springframework.webflow.conversation.impl.JdkConcurrentConversationLock.lock(JdkConcurrentConversationLock.java:44)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:54,340 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:256] - Profile Action ResolveAttributes: Error resolving attributes<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">net.shibboleth.idp.attribute.resolver.ResolutionException: org.opensaml.saml.common.SAMLException: ID storage error retrieving persistent identifier<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.attribute.resolver.impl.StoredIDDataConnector.doDataConnectorResolve(StoredIDDataConnector.java:167)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: org.opensaml.saml.common.SAMLException: ID storage error retrieving persistent identifier<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.nameid.impl.StoredPersistentIdGenerationStrategy.generate(StoredPersistentIdGenerationStrategy.java:126)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.io.IOException: org.apache.commons.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at net.shibboleth.idp.saml.nameid.impl.JDBCPersistentIdStore.getActiveEntry(JDBCPersistentIdStore.java:415)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: org.apache.commons.dbcp.SQLNestedException: Cannot get a connection, pool error Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:116)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.util.NoSuchElementException: Timeout waiting for idle object<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:1174)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">2015-09-08 09:50:54,993 - ERROR [net.shibboleth.idp.consent.flow.ar.AbstractAttributeReleaseAction:150] - Profile Action PopulateAttributeReleaseContext: Unable to locate attribute context<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Some ideas ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks’ for help<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New";mso-fareast-language:FR-CH">Jacques Tissot
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New";mso-fareast-language:FR-CH">Université de Fribourg
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New";mso-fareast-language:FR-CH">Switzerland<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>