We are still experiencing a problem with the expiration of TGT's Ehache. The “timeToKillInSeconds” value seems to have no effect on removing the TGT from Ehcache temp folder. The TGT entries are not deleted until the “maxTimeToLiveInSeconds” is reached. The attached log illustrates that CAS detects the TGT is expired and the TGT is removed however these same messages are written again every 2 minutes. We observe that the file still exists in the temp ehcache folder and does not get deleted until the “maxTimeToLiveInSeconds” is reached.
We are currently using 5.2.2-SNAPSHOT within a two server HA environment cas.ticket.tgt.maxTimeToLiveInSeconds=28800 cas.ticket.tgt.timeToKillInSeconds=240 cas.ticket.registry.ehcache.replicateUpdatesViaCopy=true cas.ticket.registry.ehcache.cacheManagerName=ticketRegistryCacheManager cas.ticket.registry.ehcache.replicatePuts=true cas.ticket.registry.ehcache.replicateUpdates=true cas.ticket.registry.ehcache.memoryStoreEvictionPolicy=LRU cas.ticket.registry.ehcache.configLocation=file:///opt/login-test/config/ehcache-replicated.xml cas.ticket.registry.ehcache.maximumBatchSize=100 cas.ticket.registry.ehcache.shared=true cas.ticket.registry.ehcache.replicationInterval=10000 cas.ticket.registry.ehcache.cacheTimeToLive=240 cas.ticket.registry.ehcache.diskExpiryThreadIntervalSeconds=0 cas.ticket.registry.ehcache.replicateRemovals=true cas.ticket.registry.ehcache.maxChunkSize=5000000 cas.ticket.registry.ehcache.maxElementsOnDisk=0 cas.ticket.registry.ehcache.maxElementsInCache=0 cas.ticket.registry.ehcache.maxElementsInMemory=10000 cas.ticket.registry.ehcache.eternal=false cas.ticket.registry.ehcache.loaderAsync=true cas.ticket.registry.ehcache.replicatePutsViaCopy=true cas.ticket.registry.ehcache.cacheTimeToIdle=240 cas.ticket.registry.ehcache.persistence=LOCALTEMPSWAP cas.ticket.registry.ehcache.synchronousWrites=false Any insight or thoughts would be great! -Gary . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CY4PR03MB301495CD07B342BA1A74673B95CB0%40CY4PR03MB3014.namprd03.prod.outlook.com.
Creates the TGT within the temp folder [DEBUG] 2018-02-16 14:17:05,163 org.apereo.cas.ticket.factory.DefaultServiceTicketFactory produceTicketIdentifier - Looking up service ticket id generator for [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl] [DEBUG] 2018-02-16 14:17:05,166 org.apereo.cas.ticket.factory.DefaultServiceTicketFactory create - Attempting to encode service ticket [ST-1-XAGBHL3MpaAD9Rmn4gvxB6luFeo-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,167 org.apereo.cas.ticket.factory.DefaultServiceTicketFactory create - Encoded service ticket id [ST-1-XAGBHL3MpaAD9Rmn4gvxB6luFeo-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,174 org.apereo.cas.ticket.DefaultTicketCatalog find - Locating ticket definition for ticket [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,174 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicket - Encoding ticket [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,184 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicketId - Encoded original ticket id [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] to [fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59] [DEBUG] 2018-02-16 14:17:05,185 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicket - Created encoded ticket [[fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59]] [DEBUG] 2018-02-16 14:17:05,185 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [ticketGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@2a7d4fee[implementationClass=class org.apereo.cas.ticket.TicketGrantingTicketImpl,prefix=TGT]] [DEBUG] 2018-02-16 14:17:05,185 org.apereo.cas.ticket.registry.EhCacheTicketRegistry addTicket - Adding ticket [fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59] to the cache [ticketGrantingTicketsCache] to live [28800] seconds and stay idle for [240] seconds [DEBUG] 2018-02-16 14:17:05,186 net.sf.ehcache.store.disk.Segment - put added 0 on heap [DEBUG] 2018-02-16 14:17:05,189 net.sf.ehcache.store.disk.Segment - put updated, deleted 0 on heap [DEBUG] 2018-02-16 14:17:05,189 net.sf.ehcache.store.disk.Segment - put updated, deleted 0 on disk [DEBUG] 2018-02-16 14:17:05,189 net.sf.ehcache.store.disk.Segment - fault removed 0 from heap [DEBUG] 2018-02-16 14:17:05,189 net.sf.ehcache.store.disk.Segment - fault added 0 on disk [DEBUG] 2018-02-16 14:17:05,189 org.apereo.cas.ticket.DefaultTicketCatalog find - Locating ticket definition for ticket [ST-1-XAGBHL3MpaAD9Rmn4gvxB6luFeo-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,190 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicket - Encoding ticket [ST-1-XAGBHL3MpaAD9Rmn4gvxB6luFeo-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:17:05,200 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicketId - Encoded original ticket id [ST-1-XAGBHL3MpaAD9Rmn4gvxB6luFeo-login-test.fortlewis.edu] to [03ef13c63e62ac9835f22ac8aa07ade0ae4e97ff2b49ade49f3cc1c881ade02758a233aacd3c3f266a0057a168274ecf4064a4b2a8133b831845ed6dc8ba44d6] [DEBUG] 2018-02-16 14:17:05,200 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicket - Created encoded ticket [[03ef13c63e62ac9835f22ac8aa07ade0ae4e97ff2b49ade49f3cc1c881ade02758a233aacd3c3f266a0057a168274ecf4064a4b2a8133b831845ed6dc8ba44d6]] [DEBUG] 2018-02-16 14:17:05,200 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [serviceTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@6085d123[implementationClass=class org.apereo.cas.ticket.ServiceTicketImpl,prefix=ST]] [DEBUG] 2018-02-16 14:17:05,204 org.apereo.cas.ticket.registry.EhCacheTicketRegistry addTicket - Adding ticket [03ef13c63e62ac9835f22ac8aa07ade0ae4e97ff2b49ade49f3cc1c881ade02758a233aacd3c3f266a0057a168274ecf4064a4b2a8133b831845ed6dc8ba44d6] to the cache [serviceTicketsCache] to live [10] seconds and stay idle for [10] seconds [DEBUG] 2018-02-16 14:17:05,204 net.sf.ehcache.store.disk.Segment - put added 0 on heap [DEBUG] 2018-02-16 14:17:05,205 net.sf.ehcache.store.disk.Segment - fault removed 0 from heap [DEBUG] 2018-02-16 14:17:05,205 net.sf.ehcache.store.disk.Segment - fault added 0 on disk [DEBUG] 2018-02-16 14:17:05,205 net.sf.ehcache.distribution.RMICacheManagerPeerProvider - Lookup URL //10.39.2.27:41001/serviceTicketsCache Detected that TGT is expired and evicts the TGT [DEBUG] 2018-02-16 14:21:49,054 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [ticketGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@2a7d4fee[implementationClass=class org.apereo.cas.ticket.TicketGrantingTicketImpl,prefix=TGT]] [DEBUG] 2018-02-16 14:21:49,054 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Attempting to decode [[fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59]] [DEBUG] 2018-02-16 14:21:49,065 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Decoded ticket to [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:21:49,065 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [proxyGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@720d55ee[implementationClass=class org.apereo.cas.ticket.ProxyGrantingTicketImpl,prefix=PGT]] [DEBUG] 2018-02-16 14:21:49,065 org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy isExpired - Ticket is expired because the time since last use is greater than timeToKillInSeconds [DEBUG] 2018-02-16 14:21:49,065 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner cleanTicket - Cleaning up expired ticket-granting ticket [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [INFO] 2018-02-16 14:21:49,066 org.apereo.cas.logout.DefaultLogoutManager performLogout - Performing logout operations for [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:21:49,070 org.apereo.cas.logout.DefaultLogoutManager lambda$performLogoutForTicket$2 - Handling single logout callback for [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@6b90d5d2[id=https://apps-dev.fortlewis.edu/classifieds/Home/Login,originalUrl=https://apps-dev.fortlewis.edu/classifieds/Home/Login,artifactId=<null>,principal=maxwell_g,loggedOutAlready=false,format=XML]] [DEBUG] 2018-02-16 14:21:49,070 org.apereo.cas.logout.DefaultSingleLogoutServiceMessageHandler handle - Processing logout request for service [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@6b90d5d2[id=https://apps-dev.fortlewis.edu/classifieds/Home/Login,originalUrl=https://apps-dev.fortlewis.edu/classifieds/Home/Login,artifactId=<null>,principal=maxwell_g,loggedOutAlready=false,format=XML]]... [DEBUG] 2018-02-16 14:21:49,071 org.apereo.cas.logout.DefaultSingleLogoutServiceMessageHandler handle - Service [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@6b90d5d2[id=https://apps-dev.fortlewis.edu/classifieds/Home/Login,originalUrl=https://apps-dev.fortlewis.edu/classifieds/Home/Login,artifactId=<null>,principal=maxwell_g,loggedOutAlready=false,format=XML]] does not support single logout. [INFO] 2018-02-16 14:21:49,071 org.apereo.cas.logout.DefaultLogoutManager performLogout - [0] logout requests were processed [DEBUG] 2018-02-16 14:21:49,071 org.apereo.cas.ticket.registry.AbstractTicketRegistry encodeTicketId - Encoded original ticket id [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] to [fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59] [DEBUG] 2018-02-16 14:21:49,072 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [ticketGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@2a7d4fee[implementationClass=class org.apereo.cas.ticket.TicketGrantingTicketImpl,prefix=TGT]] [DEBUG] 2018-02-16 14:21:49,072 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Attempting to decode [[fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59]] [DEBUG] 2018-02-16 14:21:49,080 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Decoded ticket to [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:21:49,081 org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy isExpired - Ticket is expired because the time since last use is greater than timeToKillInSeconds [DEBUG] 2018-02-16 14:21:49,085 net.sf.ehcache.store.disk.Segment - remove deleted nothing [DEBUG] 2018-02-16 14:21:49,085 net.sf.ehcache.distribution.RMICacheManagerPeerProvider - Lookup URL //10.39.2.27:41001/ticketGrantingTicketsCache [DEBUG] 2018-02-16 14:21:49,100 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicket - Ticket [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] has expired and is now evicted from the cache [INFO] 2018-02-16 14:21:49,100 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner cleanInternal - [0] expired tickets removed. [DEBUG] 2018-02-16 14:21:49,100 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner clean - Releasing ticket cleanup lock. [DEBUG] 2018-02-16 14:21:49,100 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner clean - Finished ticket cleanup. Detects that TGT is expired and evicts the TGT Over and Over until the TGT reaches maxTimeToLiveInSeconds [DEBUG] 2018-02-16 14:23:49,119 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicketCacheFor - Locating cache name [ticketGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@2a7d4fee[implementationClass=class org.apereo.cas.ticket.TicketGrantingTicketImpl,prefix=TGT]] [DEBUG] 2018-02-16 14:23:49,119 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Attempting to decode [[fd60e4587d6cd5ff20fa2668860bb4988d6a4646f5c9792a7b62e823ab5a552f1bd5efb05df52df5e8022937e55159d663a46be06d4449faf7dccc7e092fff59]] [DEBUG] 2018-02-16 14:23:49,123 org.apereo.cas.ticket.registry.AbstractTicketRegistry decodeTicket - Decoded ticket to [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] [DEBUG] 2018-02-16 14:23:49,123 org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy isExpired - Ticket is expired because the time since last use is greater than timeToKillInSeconds [DEBUG] 2018-02-16 14:23:49,123 net.sf.ehcache.store.disk.Segment - remove deleted nothing [DEBUG] 2018-02-16 14:23:49,124 net.sf.ehcache.distribution.RMICacheManagerPeerProvider - Lookup URL //10.39.2.27:41001/ticketGrantingTicketsCache [DEBUG] 2018-02-16 14:23:49,135 org.apereo.cas.ticket.registry.EhCacheTicketRegistry getTicket - Ticket [TGT-*GT-1-gab7t-GJ4HESonjM4QI0OSxnoKEuUS23YyYktHn6oiPqBTxhQh6GzD220VJ2njrE-i4-login-test.fortlewis.edu] has expired and is now evicted from the cache [INFO] 2018-02-16 14:23:49,135 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner cleanInternal - [0] expired tickets removed. [DEBUG] 2018-02-16 14:23:49,135 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner clean - Releasing ticket cleanup lock. [DEBUG] 2018-02-16 14:23:49,135 org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner clean - Finished ticket cleanup.
