<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">We have been having intermittent failures with our shibboleth integration. In some cases after a deployment a node will refuse to let us login at all. The identical code deployed to another node won’t have this issue in most cases. Once
it starts occuring on a node it keeps happening, restarting services or even the whole machine doesn’t seem to fix the problem. We discovered that in some cases just changing timestamps on the logback.xml file was enough to get it to working on some systems.
This was really weird and we ignored the issue. Over the last week it started occuring on a lot more of our deployments (though still not all).
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In short the error looks like some sort of disconnect in spring contexts. It complains that the bean is missing but we can clearly see that bean is in spring when we shutdown the war. Since I have been able to workaround this issue with
by just changing parts of the environment I believe that the problem is almost certainly caused by threading issues. I can see that this service that is failing is being “reloaded” with some shibboleth reloader thread my gut tells me that’s where the problem
is. I thought I had a fix by setting “idp.service.relyingparty.failFast=true” but that didn’t work in all cases.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Has anyone else experienced this sort of error in the past? Is there any way to disable the “reloading” thread? Any other recommendations? Sorry if I am using the wrong terminology I am very new to shibboleth, the engineer who implemented
our integration has moved on so we are scrambling to figure this issue out.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance, <o:p></o:p></p>
<p class="MsoNormal">Sam Hendley<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Exception:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2016-07-25 09:09:31,737 - ERROR [org.springframework.beans.factory.BeanCreationException:76] -
<o:p></o:p></p>
<p class="MsoNormal">org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'EncryptToSelfParametersStrategy' defined in file [/opt/flexnet/shibboleth-idp/system/flows/saml/saml2/common-beans.xml]: Cannot create inner bean 'net.shibboleth.idp.relyingparty.impl.EncryptionCredentialsResolver#2c15699c'
of type [net.shibboleth.idp.relyingparty.impl.EncryptionCredentialsResolver] while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.relyingparty.impl.EncryptionCredentialsResolver#2c15699c'
defined in file [/opt/flexnet/shibboleth-idp/system/flows/saml/saml2/common-beans.xml]: Cannot resolve reference to bean
<span style="background:yellow;mso-highlight:yellow">'shibboleth.RelyingPartyResolverService'</span> while setting constructor argument; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'shibboleth.RelyingPartyResolverService'
is defined<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)<o:p></o:p></p>
<p class="MsoNormal">Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.relyingparty.impl.EncryptionCredentialsResolver#2c15699c' defined in file [/opt/flexnet/shibboleth-idp/system/flows/saml/saml2/common-beans.xml]:
Cannot resolve reference to bean 'shibboleth.RelyingPartyResolverService' while setting constructor argument; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'shibboleth.RelyingPartyResolverService' is defined<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)<o:p></o:p></p>
<p class="MsoNormal">Caused by: org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'shibboleth.RelyingPartyResolverService' is defined<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:698)<o:p></o:p></p>
<p class="MsoNormal">…<o:p></o:p></p>
<p class="MsoNormal">2016-07-25 09:10:12,209 - INFO [net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:957] - Closing WebApplicationContext for namespace 'idp-servlet': startup date [Mon Jul 25 09:05:41 EDT 2016]; root of context hierarchy<o:p></o:p></p>
<p class="MsoNormal">2016-07-25 09:10:12,216 - INFO [net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:957] - Closing Root WebApplicationContext: startup date [Mon Jul 25 09:05:37 EDT 2016]; root of context hierarchy<o:p></o:p></p>
<p class="MsoNormal">…<o:p></o:p></p>
<p class="MsoNormal">2016-07-25 09:10:12,268 - INFO [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957] - Closing ApplicationContext:shibboleth.RelyingPartyResolverService: startup date [Mon Jul 25 09:05:42 EDT 2016]; parent: Root WebApplicationContext<o:p></o:p></p>
<p class="MsoNormal">2016-07-25 09:10:12,271 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:207] -
<span style="background:yellow;mso-highlight:yellow">Service 'shibboleth.RelyingPartyResolverService': Starting shutdown</span><o:p></o:p></p>
<p class="MsoNormal">2016-07-25 09:10:12,271 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:216] - Service 'shibboleth.RelyingPartyResolverService': Completing shutdown<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>