> Does this mean TGTs must/should be replicated synchronously (in order to > have a local cache entry against which to resolve an ST to a principal)?
That depends on your load. If the time it takes for an ST validation call to reach a node is shorter than the time it takes for a TGT to reach that node (from the one that created it originally), then yes you want to replicate TGTs synchronously. The best way you can tell what that threshold could be is to run stress tests against your CAS deployment, put it under extreme load and see where the failures begin. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
