This indeed was ehcache filling up to the this default mark: 

https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html#ehcache-ticket-registry
specifically: # cas.ticket.registry.ehcache.maxElementsInMemory=10000

Which I have increased to 15000 and we have sufficient heap to handle this 
increase. However, we have run a VIP monitor using cas/status and as soon 
as we went above 10000 we get this cas/status warning:

1.SessionMonitor: WARN - Session count (11798) is above threshold 10000. 
825 service tickets.

which results in the HTML cas/status code going from a 200 to a 400, which 
shutdown our VIP :-(  So I quickly disabled that monitor to keep us 
running. There must be another threshold that I need to increase, any ideas?

I will submit another cas/status question just to get greater visibility.

Thanks, Duane

On Thursday, January 18, 2018 at 11:22:21 AM UTC-7, Duane Booher wrote:
>
> Hi, we have been running a new production upgrade to CAS 5.1.6 for about a 
> week. Most things are working, however during our peak login times, our TGT 
> sessions do not last the expected default of two hours and require the user 
> to re-login early. We have a two host cluster with ehcache enabled.
>
> We are using these defaults, which work with TGT persistence up to two 
> hours,  but only during medium to low volume login periods.
>
> cas.ticket.tgt.maxTimeToLiveInSeconds=28800
> cas.ticket.tgt.timeToKillInSeconds=7200
>
> We also get a TGT TICKET_GRANTING_TICKET_DESTROYED as the new login 
> authentication is processing.
>
> Any ideas on possible mis-configurations areas, or how to best debug this?
>
> Duane
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/6932f8fc-a52f-440f-bbef-575319280c1f%40apereo.org.

Reply via email to