Thank you very much Scott. I will check with the team for a suitable solution for Iuuse#2. But i m not clear of the process to switch my default registry cleaner to JPA version that you have mentioned. How can that be done. Moreover i have followed the documentation as in https://wiki.jasig.org/display/CASUM/JpaTicketRegistry
I have also attached the ticketResgistry.xml in the thread. Can you please guide me in this. Thanks, Mckenzie On Fri, Apr 5, 2013 at 9:31 AM, Scott Battaglia <scott.battag...@gmail.com>wrote: > For #1, according to the logs, that is your ticket registry cleaner > deleting the tickets. That's normal and fine. If you are using a JPA > ticket registry though you should switch your registry cleaner to the JPA > version. > > For #2, that is outside the scope of CAS. That appears to be the > load-balancing algorithm/set up. > > -Scott Battaglia > PGP Public Key Id: 0x383733AA > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > On Wed, Apr 3, 2013 at 6:06 AM, Mckenzie J <mck2...@gmail.com> wrote: > >> Dear all, >> >> We are trying to implement CAS clustering in our environment. The >> requests are redirected to the CAS servers by the Apache web server using >> the worker.properties file. The Cas server version is v 3.5.1 and the >> ticketingRegistry configurations are done as described in >> https://wiki.jasig.org/display/CASUM/JpaTicketRegistry >> >> Following are our observations for which we need clarification: >> >> For convenience , i have named the CAS servers as cas1 and cas2 for >> debugging the attached files. >> >> 1) The startup of both the CAS is flawless but we can see that in one of >> the servers(cas2), we always see the following query fired on log: >> >> Hibernate: delete from TICKETGRANTINGTICKET where ID=? (pls. see >> cas2_out.txt file) >> >> This is missing in the other server in cas1. Due to this query , it >> deletes the TGT generated from the Database configured. Hence the issue we >> face is , suppose when CAS1 is in active mode and the user has logged in >> and then the CAS2 comes up , now it deletes the TGT generated byCAS1 from >> the database and now when we try to bring down CAS 1 and re try , expected >> result is that the CAS 2 should be able to generate a ST and validate it , >> but actually the absence of the TGT in the database results in redirection >> to CAS login page. The user is then forced to clear the cookies. >> >> Are we missing anything here? >> >> >> 2) when both the servers are up , the authentication process is always >> using the CAS2 server and for as much as times we have replicated , not >> even once we have seen the request taken up by the CAS1. But whenever both >> the CAS servers are up , the log entries show that the following actions >> take place in CAS2 >> >> 1)AUTHENTICATION_SUCCESS 2) TICKET_GRANTING_TICKET_CREATED 3) >> SERVICE_TICKET_CREATED >> >> and in CAS 1 we can see the entry of SERVICE_TICKET_VALIDATED for the >> generated ST in CAS 2. is this the expected behaviour? or are we missing >> something. >> >> Please see the log files attached for >> ST-1-RCt3mRydE6CzxgnM4RcV-cas02.example.org. Please note >> cas02.example.org is the hostname of the 2nd cas server node in the >> cluster. >> >> >> >> The server configuration of both the tomcats are attached as tomcat1 for >> CAS1 and tomcat2 for cas2 for your reference.I have also attached the >> TicketRegistry.xml of cas1 and cas2 as ticketRegistry_cas1 and >> ticketRegistry_cas2 files respectively. >> >> >> Kindly help us in understanding and resolve these behaviours if they are >> an issue. >> >> Thanks, >> Mckenzie >> >> -- >> You are currently subscribed to cas-dev@lists.jasig.org as: >> scott.battag...@gmail.com >> >> >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-dev >> >> > -- > You are currently subscribed to cas-dev@lists.jasig.org as: mck2...@gmail.com > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > > -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
