On Mon, Aug 1, 2011 at 11:43 PM, Scott Battaglia <[email protected]> wrote: > On Mon, Aug 1, 2011 at 11:15 PM, William G. Thompson, Jr. <[email protected]> > wrote: >> >> For me I think it comes down to expectations. I was surprise, and >> confused for a bit, when I set the Can't Proxy option, yet was still >> getting proxy tickets. > > Except the purpose of that feature is to prevent the creation of proxy > granting tickets, which it does.
OK. But shouldn't the purpose of the that feature be to turn off proxy behavior for that service? That's what I think folks would expect. > The label probably needs to be updated. > The services management tool is not an emergency shut off valve. (maybe > future improvements could move it in that direction, but that's not its > current function) OK. I'll open a JIRA for future improvement. I'm on this right now, so I'll spin up a patch. Bill > Cheers, > Scott > >> >> If you setting this option against a live services, I imagine that >> folks would expect the user experience to get interrupted. >> >> I suppose there could be and option for a hard/soft set. >> >> Bill >> >> >> >> On Mon, Aug 1, 2011 at 9:28 PM, Scott Battaglia >> <[email protected]> wrote: >> > I'm on the fence on this. On the one hand, you'll interrupt the user's >> > experience. On the other hand, its probably technically more correct to >> > disable it (or at least put a note that says that these items take >> > affect >> > going forward and do not affect existing sessions) >> > >> > On Mon, Aug 1, 2011 at 5:16 PM, William G. Thompson, Jr. >> > <[email protected]> >> > wrote: >> >> >> >> Folks, >> >> >> >> Ran into what may be an edge case, but likely easy to fix. Would >> >> like to get your thoughts prior to filing a jira. >> >> >> >> I'm using a sample CasApp that can get a PGT and PT for targetService. >> >> Everything working fine. >> >> >> >> * enable Services Management with proper config, everything still >> >> working >> >> fine. >> >> >> >> Test Case (edge case?): >> >> * Login in to CasApp (get PGT), then disallow proxy on CasApp via >> >> Services Management. >> >> * (haven't logged out of CasApp yet), still fetching PTs with the >> >> previously received PGT. >> >> >> >> Should CAS stop issuing PTs for a PGT from a service that has been >> >> marked as not allowed to proxy in Services Management? >> >> >> >> Bill >> >> >> >> -- >> >> You are currently subscribed to [email protected] as: >> >> [email protected] >> >> To unsubscribe, change settings or access archives, see >> >> http://www.ja-sig.org/wiki/display/JSG/cas-dev >> > >> > -- >> > You are currently subscribed to [email protected] as: >> > [email protected] >> > To unsubscribe, change settings or access archives, see >> > http://www.ja-sig.org/wiki/display/JSG/cas-dev >> >> -- >> You are currently subscribed to [email protected] as: >> [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-dev >> > > -- > You are currently subscribed to [email protected] as: [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
