<div dir="ltr">Hi Peter,<div><br><div>I will check out the fudiscr, I had looked at it at some point but found it easier to focus on getting the PI plugin to work. I think it will be worthwhile to take another look for the reason you mentioned as well.</div><div><br></div><div>I have logged a bug report to the PI plugin devs meanwhile.</div></div><div><br></div><div><a class="gmail_plusreply" id="plusReplyChip-0">@David Stava<br></a>The problem is with the plugin as Scott said. You can work around the problem with huge RAM (I have /usr/bin/java -Xms8192m -Xmx14336m  ...) and restart shibboleth every night late at night when nobody sees. That seem to work for my environment.</div><div><br></div><div>Equbay</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Oct 4, 2024 at 11:36 AM Peter Schober via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Cantor, Scott via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> [2024-10-04 18:37 CEST]:<br>
> > Doesn't sound like it will. I'd focus on getting a test running<br>
> > on "not Debian".<br>
> <br>
> Nope, don't waste the time, it's the PrivacyIdea plugin I'm afraid,<br>
> didn't want to leave this hanging and waste anyone's attention or<br>
> time.<br>
> [...]<br>
> I'm sure it's something obvious to its author, or will be in<br>
> hindsight once he takes a look.<br>
<br>
FWIW, there's a different plugin implementation available which may<br>
not suffer from this issue:<br>
<a href="https://doku.tid.dfn.de/de:shibidp:plugin-fudiscr" rel="noreferrer" target="_blank">https://doku.tid.dfn.de/de:shibidp:plugin-fudiscr</a><br>
(English version: <a href="https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr" rel="noreferrer" target="_blank">https://doku.tid.dfn.de/en:shibidp:plugin-fudiscr</a>)<br>
<br>
It may not be trivial to rip out the PI plugin and add the fudiscr one<br>
(esp. since fudiscr seems to have a lot more functionality leading to<br>
additional configuration complexity) but maybe still worth trying.<br>
(You should still report the issue to the PI plugin devs, of course.)<br>
<br>
Trying the fudicr plugin instead may make more sense if you're<br>
considering the move to the recent PI fork, <a href="https://edumfa.io/" rel="noreferrer" target="_blank">https://edumfa.io/</a> that's<br>
reportedly only supported by fudiscr but not by the plugin mentioned<br>
above.<br>
<br>
HTH,<br>
-peter<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><table width="320" cellspacing="0" cellpadding="0" style="width:320px;margin:0px;padding:0px;font-family:Verdana,Geneva,sans-serif;font-size:13px;line-height:10px;color:rgb(23,61,111);border-collapse:collapse">
    <tbody><tr>
        <td style="margin:0px;padding:0px">
            <input type="hidden" name="CUECONCTABLENAMEID" value="123412341234123412341234">
            <table width="320" cellspacing="0" cellpadding="0" style="width:320px;margin:0px;padding:0px;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:10px;line-height:10px;color:rgb(0,0,0);border-collapse:collapse">
                <tbody><tr>
                    <td style="margin:0px;padding:0px;font-family:Verdana,Geneva,sans-serif;white-space:nowrap">
                        <p style="margin:5px 0px;padding:0px">
                            <a href="mailto:equbay.kiflay@concordia.ab.ca" style="border:none;text-decoration:none;color:rgb(23,61,111);font-size:15px;font-weight:bold;margin:0px;padding:0px" target="_blank">Equbay Kiflay</a>
                        </p>
                        <p style="margin:0px 0px 5px">
                            <span style="color:rgb(23,61,111);font-size:12px">IT Operations Coordinator</span>
                        </p>
                        <p style="margin:0px 0px 5px">
                            <span style="color:rgb(23,61,111);font-size:12px">Information Technology Services</span>
                        </p>
                    </td>
                </tr>
                <tr>
                    <td style="width:320px;margin:0px;padding:0px;font-family:Verdana,Geneva,sans-serif;font-size:11px;line-height:15px;border-collapse:collapse">
                        <p style="margin:0px 10px 5px 0px">Toll-Free: +1 866 479 5200</p>
                    </td>
                </tr>
                <tr>
                    <td style="width:320px;margin:0px;padding:0px;font-family:Verdana,Geneva,sans-serif;font-size:10px;line-height:15px;border-collapse:collapse">
                        <p style="margin:0px 10px 5px 0px">
                            <a href="https://concordia.ab.ca/" style="border:none;text-decoration:none;color:rgb(23,61,111);font-size:13px;font-weight:bold;margin:0px;padding:0px" target="_blank"></a></p>
                        <p style="margin:0px 10px 1px 0px">
                            <span style="width:120px;margin:0px;padding:0px">
                                <a href="https://concordia.ab.ca/" style="border:none;text-decoration:none;color:rgb(0,0,0);margin:0px;padding:0px" target="_blank">
                                    <img src="https://static.concordia.ab.ca/img/esignaturelogo2021031701.jpg" alt="Concordia University of Edmonton" height="82" width="365" align="top">
                                </a>
                            </span>
                        </p>
                        <p style="margin:0px 10px 1px 0px">
                            <a href="https://concordia.ab.ca/" style="border:none;text-decoration:none;color:rgb(23,61,111);font-size:13px;font-weight:bold;margin:0px;padding:0px" target="_blank">concordia.ab.ca</a>
                        </p>
                    </td>
                </tr>
                <tr>
                    <td style="width:320px;margin:0px;padding:0px;font-family:Verdana,Geneva,sans-serif;font-size:10px;line-height:1px;border-collapse:collapse">
                        <p style="margin:0px 10px 2px 0px"><br>
                            <a href="https://twitter.com/CUEdmonton" style="border:none;text-decoration:none;color:rgb(0,0,0);font-size:14px;margin:0px;padding:0px" target="_blank"><img src="https://static.concordia.ab.ca/img/twitterlogo2016062701.png" alt="Concordia University of Edmonton Twitter" height="25" width="25"></a>
                            <a href="https://instagram.com/cuedmonton/" style="border:none;text-decoration:none;color:rgb(0,0,0);font-size:14px;margin:0px;padding:0px" target="_blank"><img src="https://static.concordia.ab.ca/img/instagramlogo2016062701.png" alt="Concordia University of Edmonton Instagram" height="25" width="25"></a>
                            <a href="https://facebook.com/CUEdmonton" style="border:none;text-decoration:none;color:rgb(0,0,0);font-size:14px;margin:0px;padding:0px" target="_blank"><img src="https://static.concordia.ab.ca/img/facebooklogo2016062701.png" alt="Concordia University of Edmonton Facebook" height="25" width="25"></a>
                        </p>
                    </td>
                </tr>
            </tbody></table>
        </td>
    </tr>
</tbody></table>
</div>