Hello, I see this in 6.4 RC4. I use Hazelcast, I see connections made but tickets do not go into HZ. is that because they are still in memory?
Yan On Monday, July 19, 2021 at 12:38:11 PM UTC-4 Ray Bon wrote: > Jeremy, > > I see this in cas 6.3.4 as well. > > Ray > > On Mon, 2021-07-19 at 15:19 +0000, Wickham, Jeremy wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > > I am looking to go to production with v6.2.8 very soon and I am seeing the > following log file when I am starting up. > > WARN [com.hazelcast.cp.CPSubsystem] - <[130.18.50.51]:5701 [dev] [4.0.1] > CP Subsystem is not enabled. CP data structures will operate in UNSAFE > mode! Please note that UNSAFE mode will not provide strong consistency > guarantees.> > > DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - > <Created Hazelcast map configuration for > [DefaultTicketDefinitionProperties(cascadeRemovals=false, > storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null, > excludeFromCascade=false)]> > > … > > DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - > <Creating Hazelcast instance for members [[0.0.0.1, 0.0.0.2]]> > > DEBUG [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry > encryption/signing is enabled for [hazelcast]> > > > > Then later in the logs I see the following > > > > WARN [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory > is used as the persistence storage for retrieving and managing tickets. > Tickets that are issued during runtime will be LOST when the web server is > restarted. This MAY impact SSO functionality.>^[[m > > INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry > encryption/signing is turned off. This MAY NOT be safe in a clustered > production environment. Consider using other choices to handle encryption, > signing and verification of ticket registry tickets, and verify the chosen > ticket registry does support this behavior.> > > > > I am reviving this old thread, as it seemed to not have any response that > I can find. I am not able to find a solution for this issue just yet. Was > wondering if this has been resolved in a newer version? Or is there a work > around to ensure that the in-memory ticket registry is not being used? > Also is there any insight into the CP Subsystem not enabled warning? > > > > Thanks, > > -Jeremy > > > > *From:* [email protected] <[email protected]> *On Behalf Of *Christian > Schmidt > *Sent:* Friday, September 20, 2019 10:16 AM > *To:* CAS Community <[email protected]> > *Cc:* [email protected] > *Subject:* Re: [cas-user] CAS 5.1.0-RC4 In-memory ticket registry still > starting when using Hazelcast ticket registry > > > > Hi, > > > > I just went through the logs of a new installation of 6.1 RC6 and found > the same logging entry like Matt with Version 5.1. > > > > 2019-09-20 16:38:26,277 DEBUG > [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - <Created > Hazelcast map configuration for > [DefaultTicketDefinitionProperties(cascade=false, > storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null)]> > > ... > > 2019-09-20 16:38:33,655 INFO [org.apereo.cas.util.CoreTicketUtils] - > <Ticket registry encryption/signing is turned off. This MAY NOT be safe in > a clustered production environment. Consider using other choices to handle > encryption, signing and verification of ticket registry tickets, and verify > the chosen ticket registry does support this behavior.> > > > > Accoring to the logs HZ ist starting and according to netstat is is also > running as expected. > > > > > > I had a quick look at the soruces and there is no way around, that the > function ticketRegistry() in the CasCoreTicketsConfiguration class is > getting called after the HZ ticket registry is created > > > > > > --> where can I, as mentioned by Misagh, report this as a Bug? > > > > > > > > > > -- > - Website: https://apereo.github.io/cas > <https://secure-web.cisco.com/14QBSUrYePzL61bE32PgsjevzuxKR6dR8T7RsIKRH5PLKLHHPB1sz0bygAfcNGGkW7qkVHRv_M30uT6lNVBSWDWaAAH9AOI_MXdjb1nxGVzzp2DoSosviN_Zzk5oNSINUh8BC2ldV0cQxdT1btHAcw_gfcPjx7XHzMp0uZJsJDU6ghl5kxWZ1qImm9R63UpgTox0PDvLCEBR0IHzePwoCMGCThh8G7D4Of_U2MhCRA_iyG3CGdAJzKw4Lz_bz9V_Wjr1410TdIiJAKGWzV0TB3efcL3a7rINTNNPx3NKs2d20K-ozx5Bp_vy7ZolqEHHjFR8uxObZ3ZN8Sp94ltjNgIVUyC5-FFezfitrJ7by_eg/https%3A%2F%2Fapereo.github.io%2Fcas> > - Gitter Chatroom: https://gitter.im/apereo/cas > <https://secure-web.cisco.com/1nRTMSoYbE-GAIsO_1r7hLBVuSUlodygkpZFCTL3f5nSZabQKP0isEKMcuNMy8pvrhje7NbaXn_p_ATU2tPx83ZyzgJCLLG8-RNUMIbXr-DYdQ8Wp0VfZcllet5rdWwYXAFfEI9vn_iNHTHlfXNCp5DPi446EIJ4nZGrvCvwTQKBK-QFI3XLF4SRiQi0w81gaJJPJEBEEoPIBNcmK7zZbu5ThLF6J3dqtHf-9LOTcMmv9IpuYG7uY4_jd8JietfvB1hpQrp_N06xqjrULd3xOe-kF3CD458OmXEWb3k3yw2k80W1LQ46hFKfUoZPF6z_xZh9QqWvIda5-ixmjMKhNWg/https%3A%2F%2Fgitter.im%2Fapereo%2Fcas> > - List Guidelines: https://goo.gl/1VRrw7 > <https://secure-web.cisco.com/1HbTAAh6Py2AaMD4I4VuUtEyoK4AFwaVvDJ0w20vxj8nEPOo91WjhN_kaVIQheAYkmomoeFo03pWuGsDVCQHU_9A7bcB_CJ0BZJkugKEolYPpNa5A61y_atWJnC6CfoBwHS2izmWfVQGe1hj75K_hN7lOEWpUNcffznqwN9VVXlzW4w5MKKdi-eIbx2vhfOcHr7AgeF55i8f9k5tV8WEHCAVosE8bGRB5mKGeKmvy2VcxSlJKt0ZCTJg-vDUJcc7KcbLIE23Um3Xc2KZz-qA0A3V73KSYg_kvDLNCkOUZhH2NycV_gNw1PoLd8NQ8XaKrTyAkzuej5eOjkXbyDsnlXg/https%3A%2F%2Fgoo.gl%2F1VRrw7> > - Contributions: https://goo.gl/mh7qDG > <https://secure-web.cisco.com/1qShUvylkZ5vHxEvktyib-KVZJ-D4uH5-2n8beJ-Xgxs9Shlmi1HS500Ejijj-QJBytnQC2uxmqS0O4FbKPwNwDtUIO1Oa8p0XGpTYheRFz2P5KCd-CtvGbF1pwsj6YD7Ni2a2SDpLFdimjmWsA0VF3mQRiz9e7ef7yV0L186CcojcVfjYFEQ7noxywzz9FioDxCqYfno0qE1mlaIk5qKlJGOZ2KM1Vx3UdKn-_54uoB5nmlqK6sf1Vv88NCsy7NMImhSItgayObyccG9IFyl6fU5ZUNzB2L8gwjJdaFPdluhhZ-sZmtSVzjNuVFmK7owGcZG_UVTrS-wVQwy-niWPw/https%3A%2F%2Fgoo.gl%2Fmh7qDG> > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b448aa8-edac-44f7-925b-c1930227d29a%40apereo.org > > <https://secure-web.cisco.com/1vdhHpAS2HXmEemEqo8gTyh0O8oSD5x6kgaIa-zJjj_bCQj49sQBfIEIe9ehvloNheGw1M7aRvBgNhAUNraNglthwFhdkwH0bd2oGN4bZ92KQ3EZttjlzNCWV5JxhdOUrGFAHeGEjwZeV0Dm0ZGTI1u5A0G8UPbv-TaIMnoVIO9tGT6-Q-H3OI33ivwP1SpQgXFLYp15rP-ZahXyIrMajgGPzRXgWRefdeHv2vtkc9ig5ynpbUp4PFRFUjw_7oaQ07ptIB1WhyrshNxwJYA66Y5KhHPC6mAvj_kW8Xzwu5q-hMDUu9OZw-Dyk91mRO9LJg2PQfyKeJxq8baP0pszE-YJQvfcooNREHFR2r5X9Ymw/https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2F6b448aa8-edac-44f7-925b-c1930227d29a%2540apereo.org%3Futm_medium%3Demail%26utm_source%3Dfooter> > . > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c15d6d18-0351-4e65-94d1-f50bd7211c56n%40apereo.org.
