On 01/13/2016 01:15 PM, Tom Poage wrote:
> "casuser") the cache key and value are the same (the TGT value). What
> I'd really like to do is find a TGT cache (session) entry by principal
> in case we have a breach and need to kill the session.

Perhaps this can be done in a couple of steps:

Identify TGT(s) by principal name in audit log, then remove cache entry
by TGT. TGTs in the audit log are masked currently, so that would either
require editing the audit log generator to unmask the TGTs (a risk), or
figure out how to search the cache using e.g. a regular expression.

In general, how might one administratively kill a CAS session in CAS 4.x?

Tom.

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.

Reply via email to