Priyambada,

Any loss of the ticket storage system would result in an interruption in an SSO 
session. This is not limited to redis.
#2 is more interesting.
Does cas fall back to 'in memory storage' if the remote ticket store is 
unavailable?
Is there an error log written when the ticket store is unavailable (or some 
other form of alert)?

Ray

On Tue, 2020-12-01 at 03:14 -0800, Priyambada Madala wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

Recently during my research i came across the following code from apereo redis 
ticket repository library .
https://github.com/apereo/cas/blob/master/support/cas-server-support-redis-ticket-registry/src/main/java/org/apereo/cas/ticket/registry/RedisTicketRegistry.java#L81

The implication of this code is that we dont throw any exception related 
RedisConnectionFailureException if the connection between redis cluster and cas 
is broken .
https://github.com/apereo/cas/blob/master/support/cas-server-support-redis-ticket-registry/src/main/java/org/apereo/cas/ticket/registry/RedisTicketRegistry.java#L70

This results in following behaviour .

  1.  Any Single sign in sessions cant be used any more
  2.  New users can't log in and will be stuck in login page with out any error 
message .

I have following concerns on the same .

  1.  Can any one help me understand why we designed the API to eat up the 
RedisConnectionFailureException .
  2.  Can we better handle issue #2.

--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]<mailto:[email protected]>

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e9ae210cf5fe4b6151edcc3eca506f82e8aba87.camel%40uvic.ca.

Reply via email to