Andreas,

With ehcache we observed behaviour like this. The time required with 
replication was greater than the client request time (which went to a different 
server in the cluster). When we switched to hazelcast (which is in memory but 
not replicated), those problems went away.

Ray

On Thu, 2019-05-02 at 03:11 -0700, Andreas Zschorn wrote:
Hello together,

we are running cas 6.0.3 in cluster mode with an dynamodb as ticket storage.
For one legacy application we enabled clearpass.
https://apereo.github.io/cas/6.0.x/integration/ClearPass.html

So far it works, but clearpass works only if 1 cluster node is active. 
Otherwise the credential object is null on client side.

I have the feeling, that the credential object is only saved (cached) in 
memory, so clear pass will not work in cluster mode, because the service ticket 
validation is a separate call from the service, so sticky sessions will not 
work.

I clould also not find any table in the dynamodb, which contains the credential.

Is this observation correct?

An  productive SSO  authentication server not running in HA cluster mode is 
prohibitive.

Has anyone a solution to get clearpass running in cluster mode? Perhaps a 
replication via hazelcast?

Thanks for any input.
Andreas



--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/dc20857aba0392c945e83207af3e21ec80c13b14.camel%40uvic.ca.

Reply via email to