Problem with Ehcache replication on Tomcat servers running 2 CAS 4.2.5 
nodes. Looks like ST replication isn't working between 2 nodes.

Any help is appreciated. 

This is short version of log file showing that ST ticket was created on 
SecurityService02, but not found on SecurityService01 milliseconds later.

2016-10-13T22:22:06,503Z SecurityService02 null DEBUG 
org.jasig.cas.ticket.registry.EhCacheTicketRegistry [scheduler_Worker-5] 
[] : Ticket ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com is removed
2016-10-13T22:22:06,496Z SecurityService02 null DEBUG 
org.jasig.cas.ticket.registry.TicketRegistryCleaner [scheduler_Worker-5] 
[] : Cleaning up expired service ticket 
[ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com]
2016-10-13T22:21:21,482Z SecurityService01 null ERROR 
org.jasig.cas.web.ServiceValidateController [http-bio-18180-exec-13] 
[] : Failed to create proxy granting ticket for 
https://dv01.xxx.com/falcon/secure/receptororg.jasig.cas.ticket.InvalidTicketException:
 ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com
2016-10-13T22:21:21,481Z SecurityService01 null DEBUG 
org.jasig.cas.CentralAuthenticationServiceImpl [http-bio-18180-exec-13] 
[] : Ticket [ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com] by type 
[ServiceTicket] cannot be foundin the ticket registry.
2016-10-13T22:21:21,481Z SecurityService01 null DEBUG 
org.jasig.cas.ticket.registry.EhCacheTicketRegistry 
[http-bio-18180-exec-13] [] : No ticket by id [
ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com 
<http://st-10-iahayqlge6ebjanhcvip-dv01sec001.xxx.com/>] is found in the 
registry
2016-10-13T22:21:21,419Z SecurityService02 null DEBUG 
org.jasig.cas.CentralAuthenticationServiceImpl [http-bio-18280-exec-18] [] 
: Publishing 
org.jasig.cas.support.events.CasServiceTicketGrantedEvent@57d7da6a[ticketGrantingTicket=org.jasig.cas.ticket.registry.TicketGrantingTicketDelegator@9aaeddec,serviceTicket=
ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com 
<http://st-10-iahayqlge6ebjanhcvip-dv01sec001.xxx.com/>]
2016-10-13T22:21:21,419Z SecurityService02 null INFO 
 org.jasig.cas.CentralAuthenticationServiceImpl [http-bio-18280-exec-18] [] 
: Granted ticket [ST-10-IAhAyqLGE6eBJAnHCViP-dv01sec001.xxx.com 
<http://st-10-iahayqlge6ebjanhcvip-dv01sec001.xxx.com/>] for service [
https://dv01.xxx.com/falcon/j_spring_cas_security_check] and principal 
[ELUX/dummytest]

BUT i also see following messages in the log:
-------
2016-10-13T21:59:27,865Z SecurityService01 null DEBUG 
net.sf.ehcache.distribution.RMIBootstrapCacheLoader [Bootstrap Thread for 
cache iqn_ServiceTicket] [] : Empty list of cache peers for cache 
iqn_ServiceTicket. No cache peer to bootstrap from.
2016-10-13T21:59:27,865Z SecurityService01 null DEBUG 
net.sf.ehcache.distribution.RMIBootstrapCacheLoader [Bootstrap Thread for cache 
iqn_ServiceTicket] 
[] : cache peers: []
-------
2016-10-13T21:59:36,508Z SecurityService02 null DEBUG 
net.sf.ehcache.distribution.RMICacheManagerPeerProviderFactory 
[localhost-startStop-1] [] : Registering peer //
dv01sec001.xxx.com:41001/cas_st
2016-10-13T21:59:36,508Z SecurityService02 null DEBUG 
net.sf.ehcache.distribution.RMICacheManagerPeerProviderFactory 
[localhost-startStop-1] [] : Registering peer //
dv01sec001.xxx.com:41001/cas_tgt
2016-10-13T21:59:25,834Z SecurityService01 null DEBUG 
net.sf.ehcache.distribution.RMICacheManagerPeerProviderFactory 
[localhost-startStop-1] [] : Registering peer //
dv01sec001.xxx.com:41002/cas_tgt
2016-10-13T21:59:25,834Z SecurityService01 null DEBUG 
net.sf.ehcache.distribution.RMICacheManagerPeerProviderFactory 
[localhost-startStop-1] [] : Registering peer //
dv01sec001.xxx.com:41002/cas_st

CAS Ehcache configuration:
##
# Ehcache Ticket Registry settings required until we can completly remove 
Ehcache
# can skip some of these properties to use default defined in 
WEB-INF/spring-configuration/ehcache-ticket-registry.xml
#
ehcache.config.file=classpath:ehcache-replicated.xml
ehcache.cachemanager.shared=true
ehcache.cachemanager.name=iqn_ticketRegistryCacheManager
ehcache.disk.expiry.interval.seconds=0
ehcache.disk.persistent=false
ehcache.eternal=false
ehcache.max.elements.memory=10000
ehcache.max.elements.disk=20000
ehcache.eviction.policy=LRU
ehcache.overflow.disk=true
ehcache.cache.st.name=iqn_ServiceTicket
ehcache.cache.st.timeIdle=0
ehcache.cache.st.timeAlive=300
ehcache.cache.tgt.name=iqn_TicketGrantingTicket
ehcache.cache.tgt.timeIdle=0
ehcache.cache.tgt.timeAlive=7201
ehcache.cache.loader.async=true
ehcache.cache.loader.chunksize=5000000
ehcache.repl.async.interval=10000
ehcache.repl.async.batch.size=100
ehcache.repl.sync.puts=true
ehcache.repl.sync.putscopy=true
ehcache.repl.sync.updates=true
ehcache.repl.sync.updatesCopy=true
ehcache.repl.sync.removals=true

-- 
CAS gitter chatroom: https://gitter.im/apereo/cas
CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
CAS documentation website: https://apereo.github.io/cas
CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To post to this group, send email to cas-user@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/856d0605-b249-471f-bc5d-644598799e1a%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to