I am looking to go to production with v6.2.8 very soon and I am seeing the following log file when I am starting up. WARN [com.hazelcast.cp.CPSubsystem] - <[130.18.50.51]:5701 [dev] [4.0.1] CP Subsystem is not enabled. CP data structures will operate in UNSAFE mode! Please note that UNSAFE mode will not provide strong consistency guarantees.> DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - <Created Hazelcast map configuration for [DefaultTicketDefinitionProperties(cascadeRemovals=false, storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null, excludeFromCascade=false)]> … DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - <Creating Hazelcast instance for members [[0.0.0.1, 0.0.0.2]]> DEBUG [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry encryption/signing is enabled for [hazelcast]>
Then later in the logs I see the following WARN [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory is used as the persistence storage for retrieving and managing tickets. Tickets that are issued during runtime will be LOST when the web server is restarted. This MAY impact SSO functionality.>^[[m INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry encryption/signing is turned off. This MAY NOT be safe in a clustered production environment. Consider using other choices to handle encryption, signing and verification of ticket registry tickets, and verify the chosen ticket registry does support this behavior.> I am reviving this old thread, as it seemed to not have any response that I can find. I am not able to find a solution for this issue just yet. Was wondering if this has been resolved in a newer version? Or is there a work around to ensure that the in-memory ticket registry is not being used? Also is there any insight into the CP Subsystem not enabled warning? Thanks, -Jeremy From: [email protected] <[email protected]> On Behalf Of Christian Schmidt Sent: Friday, September 20, 2019 10:16 AM To: CAS Community <[email protected]> Cc: [email protected] Subject: Re: [cas-user] CAS 5.1.0-RC4 In-memory ticket registry still starting when using Hazelcast ticket registry Hi, I just went through the logs of a new installation of 6.1 RC6 and found the same logging entry like Matt with Version 5.1. 2019-09-20 16:38:26,277 DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - <Created Hazelcast map configuration for [DefaultTicketDefinitionProperties(cascade=false, storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null)]> ... 2019-09-20 16:38:33,655 INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry encryption/signing is turned off. This MAY NOT be safe in a clustered production environment. Consider using other choices to handle encryption, signing and verification of ticket registry tickets, and verify the chosen ticket registry does support this behavior.> Accoring to the logs HZ ist starting and according to netstat is is also running as expected. I had a quick look at the soruces and there is no way around, that the function ticketRegistry() in the CasCoreTicketsConfiguration class is getting called after the HZ ticket registry is created --> where can I, as mentioned by Misagh, report this as a Bug? -- - Website: https://apereo.github.io/cas<https://secure-web.cisco.com/14QBSUrYePzL61bE32PgsjevzuxKR6dR8T7RsIKRH5PLKLHHPB1sz0bygAfcNGGkW7qkVHRv_M30uT6lNVBSWDWaAAH9AOI_MXdjb1nxGVzzp2DoSosviN_Zzk5oNSINUh8BC2ldV0cQxdT1btHAcw_gfcPjx7XHzMp0uZJsJDU6ghl5kxWZ1qImm9R63UpgTox0PDvLCEBR0IHzePwoCMGCThh8G7D4Of_U2MhCRA_iyG3CGdAJzKw4Lz_bz9V_Wjr1410TdIiJAKGWzV0TB3efcL3a7rINTNNPx3NKs2d20K-ozx5Bp_vy7ZolqEHHjFR8uxObZ3ZN8Sp94ltjNgIVUyC5-FFezfitrJ7by_eg/https%3A%2F%2Fapereo.github.io%2Fcas> - Gitter Chatroom: https://gitter.im/apereo/cas<https://secure-web.cisco.com/1nRTMSoYbE-GAIsO_1r7hLBVuSUlodygkpZFCTL3f5nSZabQKP0isEKMcuNMy8pvrhje7NbaXn_p_ATU2tPx83ZyzgJCLLG8-RNUMIbXr-DYdQ8Wp0VfZcllet5rdWwYXAFfEI9vn_iNHTHlfXNCp5DPi446EIJ4nZGrvCvwTQKBK-QFI3XLF4SRiQi0w81gaJJPJEBEEoPIBNcmK7zZbu5ThLF6J3dqtHf-9LOTcMmv9IpuYG7uY4_jd8JietfvB1hpQrp_N06xqjrULd3xOe-kF3CD458OmXEWb3k3yw2k80W1LQ46hFKfUoZPF6z_xZh9QqWvIda5-ixmjMKhNWg/https%3A%2F%2Fgitter.im%2Fapereo%2Fcas> - List Guidelines: https://goo.gl/1VRrw7<https://secure-web.cisco.com/1HbTAAh6Py2AaMD4I4VuUtEyoK4AFwaVvDJ0w20vxj8nEPOo91WjhN_kaVIQheAYkmomoeFo03pWuGsDVCQHU_9A7bcB_CJ0BZJkugKEolYPpNa5A61y_atWJnC6CfoBwHS2izmWfVQGe1hj75K_hN7lOEWpUNcffznqwN9VVXlzW4w5MKKdi-eIbx2vhfOcHr7AgeF55i8f9k5tV8WEHCAVosE8bGRB5mKGeKmvy2VcxSlJKt0ZCTJg-vDUJcc7KcbLIE23Um3Xc2KZz-qA0A3V73KSYg_kvDLNCkOUZhH2NycV_gNw1PoLd8NQ8XaKrTyAkzuej5eOjkXbyDsnlXg/https%3A%2F%2Fgoo.gl%2F1VRrw7> - Contributions: https://goo.gl/mh7qDG<https://secure-web.cisco.com/1qShUvylkZ5vHxEvktyib-KVZJ-D4uH5-2n8beJ-Xgxs9Shlmi1HS500Ejijj-QJBytnQC2uxmqS0O4FbKPwNwDtUIO1Oa8p0XGpTYheRFz2P5KCd-CtvGbF1pwsj6YD7Ni2a2SDpLFdimjmWsA0VF3mQRiz9e7ef7yV0L186CcojcVfjYFEQ7noxywzz9FioDxCqYfno0qE1mlaIk5qKlJGOZ2KM1Vx3UdKn-_54uoB5nmlqK6sf1Vv88NCsy7NMImhSItgayObyccG9IFyl6fU5ZUNzB2L8gwjJdaFPdluhhZ-sZmtSVzjNuVFmK7owGcZG_UVTrS-wVQwy-niWPw/https%3A%2F%2Fgoo.gl%2Fmh7qDG> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b448aa8-edac-44f7-925b-c1930227d29a%40apereo.org<https://secure-web.cisco.com/1vdhHpAS2HXmEemEqo8gTyh0O8oSD5x6kgaIa-zJjj_bCQj49sQBfIEIe9ehvloNheGw1M7aRvBgNhAUNraNglthwFhdkwH0bd2oGN4bZ92KQ3EZttjlzNCWV5JxhdOUrGFAHeGEjwZeV0Dm0ZGTI1u5A0G8UPbv-TaIMnoVIO9tGT6-Q-H3OI33ivwP1SpQgXFLYp15rP-ZahXyIrMajgGPzRXgWRefdeHv2vtkc9ig5ynpbUp4PFRFUjw_7oaQ07ptIB1WhyrshNxwJYA66Y5KhHPC6mAvj_kW8Xzwu5q-hMDUu9OZw-Dyk91mRO9LJg2PQfyKeJxq8baP0pszE-YJQvfcooNREHFR2r5X9Ymw/https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2F6b448aa8-edac-44f7-925b-c1930227d29a%2540apereo.org%3Futm_medium%3Demail%26utm_source%3Dfooter>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/BN8PR01MB53807CA4B1F217C98121FF6899E19%40BN8PR01MB5380.prod.exchangelabs.com.
