PUBLIC / CYHOEDDUS Thanks Ray,
Actually we are devolving authentication to Azure (with its MFA), and if the user takes a long time to log in (finding their phone, MFA problems, etc) then the CAS SSO fails (actually the user gets a “Application is unauthorized to use CAS” message). The timeout is 5 minutes, which matched the login page timeout we are both familiar with, so I assumed they were related. We are getting quite a lot of these, so we’d like to extend the timeout for a few more minutes. The cas.ticket.tst.timeToKillInSeconds seems to fix the problem (in test, I increased it to 15 minutes), but I don’t know what else it might affect! Kevin From: <[email protected]> on behalf of Ray Bon <[email protected]> Reply to: "[email protected]" <[email protected]> Date: Thursday, 27 August 2020 at 18:14 To: "[email protected]" <[email protected]> Subject: Re: [cas-user] Logon Page Timeout Setting RHYBUDD: Mae'r e-bost hwn yn tarddu o'r tu allan i'r sefydliad. Peidiwch â chlicio dolenni nac agor atodiadau oni bai eich bod yn adnabod yr anfonwr ac yn gwybod bod y cynnwys yn ddiogel. CAUTION: This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe. Kevin, I do not experience this behaviour in 6.1.x. (It used to exist in cas 3.x.) I have not used a transient session ticket, but I suspect it is created after successful login. So, no. Out of curiosity, why do you care if a user sits on the log in screen for 5m? Ray On Thu, 2020-08-27 at 11:33 +0000, Kevin Sewell wrote: PUBLIC / CYHOEDDUS Is it this one? cas.ticket.tst.timeToKillInSeconds From: <[email protected]> on behalf of Kevin Sewell <[email protected]> Reply to: "[email protected]" <[email protected]> Date: Thursday, 27 August 2020 at 10:57 To: "[email protected]" <[email protected]> Subject: Re: [cas-user] Logon Page Timeout Setting I’m using 6.2. PUBLIC / CYHOEDD Hi, Could someone tell me the configuration setting to extend the 5 minute logon page timeout? That’s the one where if you don’t provide credentials to the login screen within 5 minutes, it will show you the login screen again. Thanks, Kevin -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations. -- - Website: https://apereo.github.io/cas<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapereo.github.io%2Fcas&data=02%7C01%7Ckevin.sewell%40southwales.ac.uk%7C3abd7a96784f4c82d20a08d84aaca21f%7Ce5aafe7c971b4ab7b039141ad36acec0%7C0%7C1%7C637341452616059658&sdata=8XtdlSMNwb5CM37lj6h2BZc3a%2ByK2cXWHp1OiIro0B4%3D&reserved=0> - Gitter Chatroom: https://gitter.im/apereo/cas<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitter.im%2Fapereo%2Fcas&data=02%7C01%7Ckevin.sewell%40southwales.ac.uk%7C3abd7a96784f4c82d20a08d84aaca21f%7Ce5aafe7c971b4ab7b039141ad36acec0%7C0%7C1%7C637341452616064637&sdata=aWNzpHkGPA1Np%2Fr16HdvtSS4yxlLPp2o4QsEIXq4%2BOE%3D&reserved=0> - List Guidelines: https://goo.gl/1VRrw7<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2F1VRrw7&data=02%7C01%7Ckevin.sewell%40southwales.ac.uk%7C3abd7a96784f4c82d20a08d84aaca21f%7Ce5aafe7c971b4ab7b039141ad36acec0%7C0%7C1%7C637341452616069614&sdata=b0V1Ym5e4RzREa777iCZdI%2BilPTy0rpnzSJlRAc%2BDxc%3D&reserved=0> - Contributions: https://goo.gl/mh7qDG<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2Fmh7qDG&data=02%7C01%7Ckevin.sewell%40southwales.ac.uk%7C3abd7a96784f4c82d20a08d84aaca21f%7Ce5aafe7c971b4ab7b039141ad36acec0%7C0%7C1%7C637341452616074592&sdata=KgcHLZJGZWtoxFn1BQCY2Z7DL%2BkPwcWfpsHjNPbt4mo%3D&reserved=0> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/262411cb4340194862378f44f7e7a8149c886c4f.camel%40uvic.ca<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2F262411cb4340194862378f44f7e7a8149c886c4f.camel%2540uvic.ca%3Futm_medium%3Demail%26utm_source%3Dfooter&data=02%7C01%7Ckevin.sewell%40southwales.ac.uk%7C3abd7a96784f4c82d20a08d84aaca21f%7Ce5aafe7c971b4ab7b039141ad36acec0%7C0%7C1%7C637341452616079573&sdata=ipDdOa0rdpJ5X7YH5cu3qTxvRszTT2RSrU1m4WaYXTM%3D&reserved=0>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/F8141970-B404-4251-9BDB-592365D55906%40southwales.ac.uk.
