It does sort of look like a bug. Your PT is actually tied to the PGT which is tied to the TGT. Destroying the TGT should remove the PGT too. The only reasonable explanation here is that your TGT is not tracking services for which STs have been issued. When you create STs, TGT is supposed to track services that are associated with those. In your logs, I am not seeing children of a TGT removed, which sort of suggests that those services are not kept in check somehow.
I don’t know if this is a bug yet; nothing jumps out at me. You probably should step through the registry code at the time when CAS attempts to delete a TGT. -- Misagh From: William <[email protected]> Reply: William <[email protected]> Date: July 5, 2016 at 11:22:48 AM To: CAS Community <[email protected]> Cc: [email protected] <[email protected]> Subject: Re: [cas-user] Minor Issue With CAS Functional Tests I found what I was missing, but unfortunately it did not fix the issue. Since I am using the CAS REST API to create the TGT, I needed to include a call to "/v1/tickets/TGT-<some TGT ID>" using the HTTP DELETE method before calling the "/cas/proxy" endpoint. I am attaching another test run which includes the call for the TGT to be deleted. I can see the TGT get destroyed in the log, but then it allows me to create a proxy ticket off the proxy granting ticket. That proxy granting ticket is tied to the destroyed TGT. This seems like a bug to me unless I am missing something. Any thoughts? -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3bc28aa1-473f-47b3-88cb-2bea1dddb37f%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.577c2c74.13df71b7.3037%40unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
