In summary, the behavior I see is the following: 1. I login to the first SSO application 2. CAS creates the TGT ticket on the first server and then replicates it to the second. 3. I bring up the login for the second SSO application. 4. CAS performs a TICKET_GRANTING_TICKET_DESTROYED on the TGT ticket 5. Because the TGT is gone, CAS proceeds to login into the second SSO application.
Why causes CAS to delete the TGT ticket? -Gary -----Original Message----- From: Maxwell, Gary Sent: Monday, January 16, 2017 3:28 PM To: [email protected] Subject: RE: [cas-user] Cas 5 and implementing ehcache replication Hi Seshu, I turned on Debug and It shows me where it creates the TGT: DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu to the cache org.apereo.cas.ticket.TicketCache to live 7200 seconds and stay idle for 7200 seconds> However latter on (in abbreviated log) it says it can't find it: DEBUG [org.apereo.cas.web.support.DefaultCasCookieValueManager] - <Decoded cookie value is [TGT-**********************************************[email protected]@Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0]> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.fortlewis.edu] is found in the registry> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu] is found in the registry> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXXX.edu] is found in the registry> DEBUG [org.apereo.cas.CentralAuthenticationServiceImpl] - <Ticket [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu] by type [Ticket] cannot be found in the ticket registry.> DEBUG [org.apereo.cas.CentralAuthenticationServiceImpl] - <Removing ticket [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu] from registry...> Any Ideas why???? -Gary -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of sesharaju sv Sent: Monday, January 16, 2017 11:34 AM To: [email protected] Subject: Re: [cas-user] Cas 5 and implementing ehcache replication This would be few reasons behind this issue. Please enable your ehcache logging to debug and you should be able to see what exactly the issues is. Thanks Seshu On 16 January 2017 at 23:42, Maxwell, Gary <[email protected]> wrote: > .We have installed cas 5 along with ehcache replication. When we login > to a SSO application the replication works great however when we log > into the next SSO application, CAS deletes the existing TGT. CAS then > requires the user to re-authenticate. Does anyone know why this would be > happening? > > > > Thanks for any insight on this! > > > > -Gary > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: > https://apereo.github.io/cas/Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google > Groups "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/016e99eee450407ca0bb6a035d5032fb%40mbx2.fortlewis.edu. -- Venkata S Sadhu India (Mobile) : +91 7032638062 INDIA -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAABZGc2v3cFumnBDu%2B7%3DVu0XzJC%2B7cvOGMpzY6OYa7zgtagPvQ%40mail.gmail.com. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/332249dc80bb44f69891710ca4248f30%40mbx2.fortlewis.edu.
