<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:"Malgun Gothic";
panose-1:2 11 5 3 2 0 0 2 0 4;}
@font-face
{font-family:"Aptos Display";}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"\@Malgun Gothic";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal">Hello, we are running shib version 4.2.1 and had the following error last week. The understanding is exactly what the error message says, the connection to xxxxx-lb timed out after 3000 ms. We are trying to determine was this shibboleth
causing the problem, was this the load balancer, networking in general, something else? How would we determine where the issue was?<span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The second part of the question: if the search timed out, why did the assertion go across? It appears that with the double pipe, no attributes were sent? Should this be a fatal error?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2025-01-28 12:07:32,096 - ERROR [net.shibboleth.idp.profile.impl.ResolveAttributes:317] - 10.226.70.238 - Profile Action ResolveAttributes: Error resolving attributes<o:p></o:p></p>
<p class="MsoNormal">net.shibboleth.idp.attribute.resolver.ResolutionException: Data Connector 'umbLDAP': Unable to execute LDAP search<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.attribute.resolver.dc.ldap.impl.LDAPDataConnector.retrieveAttributes(LDAPDataConnector.java:225)<o:p></o:p></p>
<p class="MsoNormal">Caused by: org.ldaptive.LdapException: LDAPException(resultCode=85 (timeout), numEntries=0, numReferences=0, diagnosticMessage='A client-side timeout was encountered while waiting 3000ms for a response to search request with message ID
140, base DN 'ou=xxxx,dc=xxxx,dc=xxxx,dc=xxxx', scope SUB, and filter '(uid=xxxxx)' from server xxxxx-lb.umaryland.edu:636.', ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:55)<o:p></o:p></p>
<p class="MsoNormal">Caused by: com.unboundid.ldap.sdk.LDAPSearchException: A client-side timeout was encountered while waiting 3000ms for a response to search request with message ID 140, base DN 'ou=xxxx,dc=xxxx,dc=xxxx,dc=xxx', scope SUB, and filter '(uid=xxxx'
from server xxxxx-lb.umaryland.edu:636.<o:p></o:p></p>
<p class="MsoNormal"> at com.unboundid.ldap.sdk.SearchRequest.process(SearchRequest.java:1206)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2025-01-28 12:07:32,104 - INFO [Shibboleth-Audit.SSO:283] - 10.226.70.238 - 10.226.70.238|2025-01-28T17:07:32.104614Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_950e5c979f28f73ec8be11f2f371332b|cfapps1.umaryland.edu/sp|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://webauth.umaryland.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_f83d6656df4ec4106b5cf2f0a51f7350|xxxxx|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<span style="background:yellow;mso-highlight:yellow">||</span>AAdzZWNyZXQx35m8zFPoeJJWUWJ1UMtFx3Gl6aLHuMVIWPa2V7XYWQSToThPHXqAwIJvjHJ8XOHjWGridsnLiIRi6bSOIf0Xhf23HVjOhbTd7FtqYPV46IWQ75l4WHw6/GKjFDtm|_db71f7d9698b8b52d5ac46cc06ac6887|<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal">Also is this related to search timeout?<span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal">2025-01-28 12:05:24,604 - WARN [org.ldaptive.pool.BlockingConnectionPool:784] - -
<a href="mailto:org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@119e70d">
org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@119e70d</a> failed validation<o:p></o:p></p>
<p class="MsoNormal">2025-01-28 12:05:24,853 - INFO [org.ldaptive.pool.BlockingConnectionPool:497] - - added available connection:
<a href="mailto:org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@42b6aaa1">
org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@42b6aaa1</a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none">Dong Lee<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none">Identity Management & System Integration
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#1F497D;mso-ligatures:none">Center for Information Technology Services
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Calibri Light",sans-serif;color:#1F497D;mso-ligatures:none">University of Maryland, Baltimore<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Aptos Display",sans-serif;color:#0E2841;mso-ligatures:none">410-706-3027<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none"><a href="mailto:dlee@umaryland.edu"><span style="color:#0563C1">dlee@umaryland.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>