Shibboleth Developers

[Chad La Joie <>]

hmm... nothing like that should have changed since the previous 
snapshot.  Had you tested with that one too or just this snapshot?

On 6/17/10 2:49 PM, Russell Beall wrote:
> I installed this in my staging environment, and the first thing I had to do 
> was instrument some more LDAP related classes to the TC config.
>
> That was pretty easy since TC prompted me regarding which classes needed to 
> be added.
>
> Initial results show quite an increase in the load time, not because it was busy, but because it 
> was hanging on something.  Then when I try to log into anything, it hangs again.  Debug tracing 
> seems to indicate that it is waiting on the LDAP code, for instance, the login attempt seems to 
> hang after the line "Attempting to authenticate user 'beall'".  And on startup, it 
> seems to hang just after printing the line "Loading 3 principal connectors".  There is 
> a precision to the delay time also, since it is precisely 60 seconds each time for most of the 
> delays, and precisely 120 seconds for several of the authentication attempts.
>
> This happens both with and without TC in the mix.
>
> Perhaps some of my deprecated time specifiers changed the timing somewhere?  
> I noticed that time specifiers which formerly read 60000ms, now print to the 
> log as 60000000ms.  I presume that the field specifiers changed from 
> milliseconds to seconds?
>
> Haven't dug much beyond this point yet.
>
> Russ.
>
> On Jun 16, 2010, at 6:20 AM, Chad La Joie wrote:
>
> > I have just released a new version[1] of IdP v2.2 (the 20100616 version).
> >
> > The main changes in this release focus on metadata fetching and reloading and 
> > include:
> > - ability to turn off the fail-fast initialization behavior
> > - reloading of metadata is now done in a background process
> > - HTTP (and FileBackedHTTP) providers now support:
> >   - gzip and deflate compression
> >   - conditional fetching based on Last-Modified and/or ETag data
> >   - ability to ignore the server's SSL certificate
> >   - HTTP proxy support
> >   - HTTP basic authentication support
> >   - byte-for-byte equality of backup file created by the FileBackedHTTP 
> > provider
> >
> > The documentation on the site has been updated, though will be reworked 
> > before the release, especially the part describing the reloading process.
> >
> > I am asking people to *please* test this release, especially the metadata 
> > related items.  I've done a fair amount of testing on them, but quite a lot 
> > of the metadata provider code changed so I'd prefer other people give it a go 
> > as well.  And if you do test it, please report back positive test results, I 
> > don't want to assume that no news is good news in this case.
> >
> > Thanks.
> >
> > [1] 
> > http://shibboleth.internet2.edu/downloads/maven2/edu/internet2/middleware/shibboleth-identityprovider/2.2.0-SNAPSHOT
> > --
> > Chad La Joie
> > http://itumi.biz
> > trusted identities, delivered

--
Chad La Joie
http://itumi.biz
trusted identities, delivered