Thank you! Yauheni That fixed TGT from being destroyed and I am able to bring up multiple SSO applications after logging in one time. This however leads me to another issue. I am running two cas servers with ehcache replication. After logging into one application, I can see the ticket is replicated to both servers however when I stop the server that I initially logged into, the load balancer sends me to the replicated server however it doesn’t recognize the replicated ticket and asks for me to login again.
Any clues how I can troubleshoot this issue? -Gary From: [email protected] [mailto:[email protected]] On Behalf Of Yauheni Sidarenka Sent: Tuesday, January 17, 2017 6:22 AM To: CAS Community <[email protected]> Subject: Re: [cas-user] Cas 5 and implementing ehcache replication Hello, We had similar issue and we solved it using cas.ticket.registry.ehcache.persistence=LOCALTEMPSWAP property instead of cas.ticket.registry.ehcache.persistence=NONE which is default one for CAS 5.0.0 (and to be clear, for Ehcache as well). Hope this will help you. Regards, Yauheni. On Tuesday, January 17, 2017 at 8:49:55 AM UTC+3, maxwell_g wrote: In summary, the behavior I see is the following: 1. I login to the first SSO application 2. CAS creates the TGT ticket on the first server and then replicates it to the second. 3. I bring up the login for the second SSO application. 4. CAS performs a TICKET_GRANTING_TICKET_DESTROYED on the TGT ticket 5. Because the TGT is gone, CAS proceeds to login into the second SSO application. Why causes CAS to delete the TGT ticket? -Gary -----Original Message----- From: Maxwell, Gary Sent: Monday, January 16, 2017 3:28 PM To: [email protected]<javascript:> Subject: RE: [cas-user] Cas 5 and implementing ehcache replication Hi Seshu, I turned on Debug and It shows me where it creates the TGT: DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Adding ticket TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu<http://5B0wydvh6k-login-test1.XXXXXXXX.edu> to the cache org.apereo.cas.ticket.TicketCache to live 7200 seconds and stay idle for 7200 seconds> However latter on (in abbreviated log) it says it can't find it: DEBUG [org.apereo.cas.web.support.DefaultCasCookieValueManager] - <Decoded cookie value is [TGT-**********************************************[email protected]@Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0]> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.fortlewis.edu<http://5B0wydvh6k-login-test1.XXXXXXXX.fortlewis.edu>] is found in the registry> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu<http://5B0wydvh6k-login-test1.XXXXXXXX.edu>] is found in the registry> TRACE [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <Ticket encryption is not enabled. Falling back to default behavior> DEBUG [org.apereo.cas.ticket.registry.EhCacheTicketRegistry] - <No ticket by id [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXXX.edu<http://5B0wydvh6k-login-test1.XXXXXXXXX.edu>] is found in the registry> DEBUG [org.apereo.cas.CentralAuthenticationServiceImpl] - <Ticket [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu<http://5B0wydvh6k-login-test1.XXXXXXXX.edu>] by type [Ticket] cannot be found in the ticket registry.> DEBUG [org.apereo.cas.CentralAuthenticationServiceImpl] - <Removing ticket [TGT-**********************************************5B0wydvh6k-login-test1.XXXXXXXX.edu<http://5B0wydvh6k-login-test1.XXXXXXXX.edu>] from registry...> Any Ideas why???? -Gary -----Original Message----- From: [email protected]<javascript:> [mailto:[email protected]<javascript:>] On Behalf Of sesharaju sv Sent: Monday, January 16, 2017 11:34 AM To: [email protected]<javascript:> Subject: Re: [cas-user] Cas 5 and implementing ehcache replication This would be few reasons behind this issue. Please enable your ehcache logging to debug and you should be able to see what exactly the issues is. Thanks Seshu On 16 January 2017 at 23:42, Maxwell, Gary <[email protected]<javascript:>> wrote: > .We have installed cas 5 along with ehcache replication. When we login > to a SSO application the replication works great however when we log > into the next SSO application, CAS deletes the existing TGT. CAS then > requires the user to re-authenticate. Does anyone know why this would be > happening? > > > > Thanks for any insight on this! > > > > -Gary > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: > https://apereo.github.io/cas/Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google > Groups "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]<javascript:>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/016e99eee450407ca0bb6a035d5032fb%40mbx2.fortlewis.edu. -- Venkata S Sadhu India (Mobile) : +91 7032638062 INDIA -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<javascript:>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAABZGc2v3cFumnBDu%2B7%3DVu0XzJC%2B7cvOGMpzY6OYa7zgtagPvQ%40mail.gmail.com. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c69c367c-0bee-44c4-8224-936af7d2f0fc%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/c69c367c-0bee-44c4-8224-936af7d2f0fc%40apereo.org?utm_medium=email&utm_source=footer>. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b1a8e80015f64dfba192a4e177170608%40mbx2.fortlewis.edu.
