Romain, TGC is client side, TGT is server side. TGC is used when user logs into a new service (after initial login) to 'find' the TGT. The 'remember me' check box is for the TGT. Remove cas.tgc.rememberMeMaxAge and the TGC will be removed when the browser closes.
Ray On Wed, 2018-01-17 at 06:51 -0800, vallee.romain wrote: Hello cas users ! i just release in production my jasig 5.2 . I noticed that if I don't check "remember me", if I close and open my browser, the session is kept in memory with cookie time value: "cas.tgc.rememberMeMeMaxAge=7889400" My question, how do I get the session to close when I don't check " remember me". and if I check "remember me", that the session is saved for 2 months so this is my actual conf : ###TGT EXPIRATION # cas.ticket.tgt.timeout.maxTimeToLiveInSeconds=28800 cas.ticket.tgt.maxTimeToLiveInSeconds=28800 cas.ticket.tgt.timeToKillInSeconds=7200 cas.ticket.tgt.rememberMe.enabled=true cas.ticket.tgt.rememberMe.timeToKillInSeconds=2629800 ###TGC cas.tgc.path= cas.tgc.maxAge=-1 cas.tgc.domain= cas.tgc.name=TGCEsig cas.tgc.secure=true cas.tgc.httpOnly=true cas.tgc.rememberMeMaxAge=7889400 I don't find the difference between TGT and TGC TGC is a cookie to client ? Thank you ! best regards Romain -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1516206459.1815.61.camel%40uvic.ca.
