*Hi,

I am building the cas-server clusters based on 4.2.3 now.
I need to specify the same webflow.encryption.key and webflow.signing.key for 
all cas-servers so that they can share sessions.

However, cas-server can't read the following properties for 
WebflowCipherExecutor from /etc/cas/cas.properties.



# The encryption secret key. By default, must be a octet string of size 256.
webflow.encryption.key=K_JTCq8uRbvugXAOjPLqxPbNcpMYmxbpkqG6Th1nfSo

# The signing secret key. By default, must be a octet string of size 512.
webflow.signing.key=chgXCqVshPIGkeBR8E1UukR6HBGPY9-NfsxtyYslgB_4tobs3uRmDnqKCOuhUuRS633cmFZsbRDqL4g_eQTlMQ

Besides, the log is as follows
2016-08-17 16:43:21,271 WARN [org.jasig.cas.util.WebflowCipherExecutor] - 
<Secret key for signing is not defined. CAS will attempt to auto-generate the 
signing key>
2016-08-17 16:43:21,275 WARN [org.jasig.cas.util.WebflowCipherExecutor] - 
<Generated signing key 
pGg6HPdDHja5GdKWGxZaSsYScPrQqztY6guRQYsF5LmsfBu1JT8JgOISElwpOkLmW7CAnksOxON-pAiT1hqfew
 of size 512. The generated key MUST be added to CAS settings.>
2016-08-17 16:43:21,275 WARN [org.jasig.cas.util.WebflowCipherExecutor] - <No 
encryption key is defined. CAS will attempt to auto-generate keys>
2016-08-17 16:43:21,277 WARN [org.jasig.cas.util.WebflowCipherExecutor] - 
<Generated encryption key cheuwfbbDkQMXQlT of size 16. The generated key MUST 
be added to CAS settings.>


What's more,  cas-server can load other property such as 
memcached.servers=xx.xx.xx.xx:11211


Is it a known bug? Does anyone give me a suggestion?*

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9a0fe12a-a9b2-4ed1-91bc-07919a53a7d3%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to