Dear all,

Any  help on this will be of much use for me.

Thanks,
Mckenzie


On Wed, Apr 3, 2013 at 3:36 PM, Mckenzie J <mck2...@gmail.com> wrote:

> Dear all,
>
> We are trying to implement CAS clustering in our environment. The requests
> are  redirected to the CAS servers by the Apache web server using the
> worker.properties file. The Cas server version is v 3.5.1 and the
> ticketingRegistry configurations are done as described in
> https://wiki.jasig.org/display/CASUM/JpaTicketRegistry
>
> Following are our observations for which we need clarification:
>
> For convenience , i have named the CAS servers as cas1 and cas2 for
> debugging the attached files.
>
> 1) The startup of both the CAS is flawless but we can see that  in one of
> the servers(cas2), we always see the following query fired on log:
>
> Hibernate: delete from TICKETGRANTINGTICKET where ID=? (pls. see
> cas2_out.txt file)
>
> This is missing in the other server in cas1. Due to this query , it
> deletes the TGT generated from the Database configured. Hence the issue we
> face is , suppose when CAS1 is in active mode and the user has logged in
> and then the CAS2 comes up , now it deletes the TGT generated byCAS1 from
> the database and now when we try to bring down CAS 1 and re try , expected
> result is that the CAS 2 should be able to generate a ST and validate it ,
> but actually the absence of the TGT in the database results in redirection
> to CAS login page. The user is then forced to clear the cookies.
>
> Are we missing anything here?
>
>
> 2) when both the servers are up , the authentication process is always
> using the CAS2 server and  for as much as times we have replicated , not
> even once we have seen the request taken up by the CAS1. But whenever both
> the CAS servers are up , the log entries  show that the following actions
> take place in CAS2
>
> 1)AUTHENTICATION_SUCCESS 2) TICKET_GRANTING_TICKET_CREATED 3)
> SERVICE_TICKET_CREATED
>
> and in CAS 1 we can see the entry of  SERVICE_TICKET_VALIDATED for the
> generated ST in CAS 2. is this the expected behaviour? or are we missing
> something.
>
> Please see the log files attached for
> ST-1-RCt3mRydE6CzxgnM4RcV-cas02.example.org. Please note cas02.example.orgis 
> the hostname of the 2nd cas server node in the cluster.
>
>
>
> The server configuration of both the tomcats are attached as tomcat1 for
> CAS1 and tomcat2 for cas2 for your reference.I have also attached the
> TicketRegistry.xml of cas1 and cas2 as ticketRegistry_cas1 and
> ticketRegistry_cas2 files respectively.
>
>
> Kindly help us in understanding and resolve these behaviours if they are
> an issue.
>
> Thanks,
> Mckenzie
>
>

-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to