<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear shib users,</p>
<p>we've encountered a set of strange LDAP-related warnings in our
IdPv5.1.3 updated from a v3 config originally. Do you have a clue
what is happening and how to fix this?</p>
<p>LDAP access is working actually, AACLI returns nice assertions
including attributes from the AD.<br>
</p>
<p>Regards</p>
<p>Martin<br>
</p>
<p><font face="monospace">2025-02-27 15:39:11,357 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:216] -
Service 'shibboleth.AttributeFilterService': Completing shutdown<br>
2025-02-27 15:39:11,357 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:207] -
Service 'shibboleth.ClientInformationResolverService': Starting
shutdown%<br>
2025-02-27 15:39:11,357 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:216] -
Service 'shibboleth.ClientInformationResolverService':
Completing shutdown<br>
2025-02-27 15:39:11,361 - - WARN
[org.ldaptive.transport.netty.NettyConnection:1750] - Inbound
handler caught exception for
org.ldaptive.transport.netty.NettyConnection@555837500::ldapUrl=[org.ldaptive.LdapURL@-31836592::scheme=ldaps,
hostname=ad1.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null], isOpen=false, connectTime=null,
connectionConfig=[<a class="moz-txt-link-abbreviated" href="mailto:org.ldaptive.ConnectionConfig@1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636">org.ldaptive.ConnectionConfig@1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636</a>
<a class="moz-txt-link-freetext" href="ldaps://ad2.ad1.example-organization.edu:636">ldaps://ad2.ad1.example-organization.edu:636</a>
<a class="moz-txt-link-freetext" href="ldaps://ad3.ad1.example-organization.edu:636">ldaps://ad3.ad1.example-organization.edu:636</a>,
connectTimeout=PT3S, startTLSTimeout=PT3S,
responseTimeout=PT30S, reconnectTimeout=PT10S,
autoReconnect=true,
autoReconnectCondition=ONE_RECONNECT_ATTEMPT, autoReplay=false,
sslConfig=[org.ldaptive.ssl.SslConfig@705004620::credentialConfig=[org.ldaptive.ssl.CredentialConfigFactory$2@373543608::trustCertificates=suppressed,
authenticationCertificate=null, authenticationKey=null],
trustManagers=null, hostnameVerifier=null,
enabledCipherSuites=null, enabledProtocols=null,
handshakeCompletedListeners=null, handshakeTimeout=PT1M],
useStartTLS=false,
connectionInitializers=[<a class="moz-txt-link-abbreviated" href="mailto:org.ldaptive.BindConnectionInitializer@1468109482::bindDn=managerIDP@example-organization.edu">org.ldaptive.BindConnectionInitializer@1468109482::bindDn=managerIDP@example-organization.edu</a>,
bindSaslConfig=null,
bindControls=null],connectionStrategy=[org.ldaptive.ActivePassiveConnectionStrategy@1666153340::ldapURLSet=[org.ldaptive.LdapURLSet@766660255::active=[[org.ldaptive.LdapURL@-31836592::scheme=ldaps,
hostname=ad1.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null],
[org.ldaptive.LdapURL@1062507343::scheme=ldaps,
hostname=ad2.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null],
[org.ldaptive.LdapURL@-2138116018::scheme=ldaps,
hostname=ad3.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null]], inactive=[]],
activateCondition=DEFAULT_ACTIVATE_CONDITION,
retryCondition=DEFAULT_RETRY_CONDITION, initialized=true],
connectionValidator=null, transportOptions={}], channel=null<br>
io.netty.channel.unix.Errors$NativeIoException: recvAddress(..)
failed: Connection reset by peer<br>
2025-02-27 15:39:11,362 - - WARN
[org.ldaptive.transport.netty.NettyConnection:1750] - Inbound
handler caught exception for
org.ldaptive.transport.netty.NettyConnection@337756356::ldapUrl=[org.ldaptive.LdapURL@-31836592::scheme=ldaps,
hostname=ad1.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null], isOpen=true,
connectTime=2025-02-27T14:08:48.871325409Z,
connectionConfig=[<a class="moz-txt-link-abbreviated" href="mailto:org.ldaptive.ConnectionConfig@1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636">org.ldaptive.ConnectionConfig@1927781008::ldapUrl=ldaps://ad1.ad1.example-organization.edu:636</a>
<a class="moz-txt-link-freetext" href="ldaps://ad2.ad1.example-organization.edu:636">ldaps://ad2.ad1.example-organization.edu:636</a>
<a class="moz-txt-link-freetext" href="ldaps://ad3.ad1.example-organization.edu:636">ldaps://ad3.ad1.example-organization.edu:636</a>,
connectTimeout=PT3S, startTLSTimeout=PT3S,
responseTimeout=PT30S, reconnectTimeout=PT10S,
autoReconnect=true,
autoReconnectCondition=ONE_RECONNECT_ATTEMPT, autoReplay=false,
sslConfig=[org.ldaptive.ssl.SslConfig@705004620::credentialConfig=[org.ldaptive.ssl.CredentialConfigFactory$2@373543608::trustCertificates=suppressed,
authenticationCertificate=null, authenticationKey=null],
trustManagers=null, hostnameVerifier=null,
enabledCipherSuites=null, enabledProtocols=null,
handshakeCompletedListeners=null, handshakeTimeout=PT1M],
useStartTLS=false,
connectionInitializers=[<a class="moz-txt-link-abbreviated" href="mailto:org.ldaptive.BindConnectionInitializer@1468109482::bindDn=managerIDP@example-organization.edu">org.ldaptive.BindConnectionInitializer@1468109482::bindDn=managerIDP@example-organization.edu</a>,
bindSaslConfig=null, bindControls=null],
connectionStrategy=[org.ldaptive.ActivePassiveConnectionStrategy@1666153340::ldapURLSet=[org.ldaptive.LdapURLSet@766660255::active=[[org.ldaptive.LdapURL@-31836592::scheme=ldaps,
hostname=ad1.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null],
[org.ldaptive.LdapURL@1062507343::scheme=ldaps,
hostname=ad2.ad1.example-organization.edu, port=636,
baseDn=null, attributes=null, scope=null, filter=null,
inetAddress=null],
[org.ldaptive.LdapURL@-2138116018::scheme=ldaps,
hostname=ad3.ad1.uni-stuttgart.de, port=636, baseDn=null,
attributes=null, scope=null, filter=null, inetAddress=null]],
inactive=[]], activateCondition=DEFAULT_ACTIVATE_CONDITION,
retryCondition=DEFAULT_RETRY_CONDITION, initialized=true],
connectionValidator=null, transportOptions={}], channel=[id:
0x08ccc8ee, L:/12.34.56.78:34567 -
R:ad1.ad1.uni-stuttgart.de/12.34.56.78:636]<br>
io.netty.channel.unix.Errors$NativeIoException: recvAddress(..)
failed: Connection reset by peer<br>
2025-02-27 15:39:11,446 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:207] -
Service 'shibboleth.AttributeResolverService': Starting shutdown<br>
2025-02-27 15:39:11,447 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:216] -
Service 'shibboleth.AttributeResolverService': Completing
shutdown<br>
2025-02-27 15:39:11,449 - - INFO
[net.shibboleth.shared.service.AbstractReloadableService:207] -
Service 'shibboleth.MetadataResolverService': Starting shutdown<br>
</font><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-signature">-- <br>
<p><strong>Dr. MARTIN HITSCHEL | System Engineer</strong></p>
<p>Phone: +49 7071 407109-0<br>
Email: <a>martin.hitschel@daasi.de</a></p>
<p><strong>DAASI International GmbH</strong><br>
Europaplatz 3<br>
D-72072 Tübingen, Germany<br>
<a class="moz-txt-link-abbreviated" href="http://www.daasi.de">www.daasi.de</a></p>
<p>Registered Office: Tübingen<br>
Registration Court: Amtsgericht Stuttgart, HRB 382175<br>
CEO: Peter Gietz</p>
</div>
</body>
</html>