Hello, We had similar issue and we solved it using
cas.ticket.registry.ehcache.persistence=LOCALTEMPSWAP property instead of cas.ticket.registry.ehcache.persistence=NONE which is default one for CAS 5.0.0 (and to be clear, for Ehcache as well). Hope this will help you. Regards, Yauheni. On Tuesday, January 17, 2017 at 8:49:55 AM UTC+3, maxwell_g wrote: > > In summary, the behavior I see is the following: > > 1. I login to the first SSO application > 2. CAS creates the TGT ticket on the first server and then replicates it > to the second. > 3. I bring up the login for the second SSO application. > 4. CAS performs a TICKET_GRANTING_TICKET_DESTROYED on the TGT ticket > 5. Because the TGT is gone, CAS proceeds to login into the second SSO > application. > > Why causes CAS to delete the TGT ticket? > > -Gary > > > -----Original Message----- > From: Maxwell, Gary > Sent: Monday, January 16, 2017 3:28 PM > To: [email protected] <javascript:> > Subject: RE: [cas-user] Cas 5 and implementing ehcache replication > > Hi Seshu, > > I turned on Debug and It shows me where it creates the TGT: > > DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding > ticket TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXX.edu to the cache > org.apereo.cas.ticket.TicketCache to live 7200 seconds and stay idle for > 7200 seconds> > > However latter on (in abbreviated log) it says it can't find it: > > DEBUG [org.apereo.cas.web.support.DefaultCasCookieValueManager] - <Decoded > cookie value is > [TGT-**********************************************[email protected]@Mozilla/5.0 > > (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0]> TRACE > [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption > is not enabled. Falling back to default behavior> DEBUG > [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id > [TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXX.fortlewis.edu] is found in the registry> > TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket > encryption is not enabled. Falling back to default behavior> DEBUG > [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id > [TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXX.edu] is found in the registry> TRACE > [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption > is not enabled. Falling back to default behavior> DEBUG > [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id > [TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXXX.edu] is found in the registry> DEBUG > [org.apereo.cas.CentralAuthenticationServiceImpl] - <Ticket > [TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXX.edu] by type [Ticket] cannot be found in > the ticket registry.> DEBUG > [org.apereo.cas.CentralAuthenticationServiceImpl] - <Removing ticket > [TGT-********************************************** > 5B0wydvh6k-login-test1.XXXXXXXX.edu] from registry...> > > Any Ideas why???? > > -Gary > > -----Original Message----- > From: [email protected] <javascript:> [mailto:[email protected] > <javascript:>] On Behalf Of sesharaju sv > Sent: Monday, January 16, 2017 11:34 AM > To: [email protected] <javascript:> > Subject: Re: [cas-user] Cas 5 and implementing ehcache replication > > This would be few reasons behind this issue. Please enable your ehcache > logging to debug and you should be able to see what exactly the issues is. > > Thanks > Seshu > > On 16 January 2017 at 23:42, Maxwell, Gary <[email protected] > <javascript:>> wrote: > > .We have installed cas 5 along with ehcache replication. When we login > > to a SSO application the replication works great however when we log > > into the next SSO application, CAS deletes the existing TGT. CAS then > > requires the user to re-authenticate. Does anyone know why this would be > happening? > > > > > > > > Thanks for any insight on this! > > > > > > > > -Gary > > > > -- > > - CAS gitter chatroom: https://gitter.im/apereo/cas > > - CAS mailing list guidelines: > > https://apereo.github.io/cas/Mailing-Lists.html > > - CAS documentation website: https://apereo.github.io/cas > > - CAS project website: https://github.com/apereo/cas > > --- > > You received this message because you are subscribed to the Google > > Groups "CAS Community" group. > > To unsubscribe from this group and stop receiving emails from it, send > > an email to [email protected] <javascript:>. > > To view this discussion on the web visit > > > https://groups.google.com/a/apereo.org/d/msgid/cas-user/016e99eee450407ca0bb6a035d5032fb%40mbx2.fortlewis.edu. > > > > > > -- > Venkata S Sadhu > India (Mobile) : +91 7032638062 > INDIA > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: > https://apereo.github.io/cas/Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAABZGc2v3cFumnBDu%2B7%3DVu0XzJC%2B7cvOGMpzY6OYa7zgtagPvQ%40mail.gmail.com. > > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c69c367c-0bee-44c4-8224-936af7d2f0fc%40apereo.org.
