Hello, I see this in 6.4 RC4. I use Hazelcast, I see connections made but tickets do not go into HZ. is that because they are still in memory?
Yan On Monday, July 19, 2021 at 12:38:11 PM UTC-4 Ray Bon wrote: > Jeremy, > > I see this in cas 6.3.4 as well. > > Ray > > On Mon, 2021-07-19 at 15:19 +0000, Wickham, Jeremy wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > > I am looking to go to production with v6.2.8 very soon and I am seeing the > following log file when I am starting up. > > WARN [com.hazelcast.cp.CPSubsystem] - <[130.18.50.51]:5701 [dev] [4.0.1] > CP Subsystem is not enabled. CP data structures will operate in UNSAFE > mode! Please note that UNSAFE mode will not provide strong consistency > guarantees.> > > DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - > <Created Hazelcast map configuration for > [DefaultTicketDefinitionProperties(cascadeRemovals=false, > storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null, > excludeFromCascade=false)]> > > … > > DEBUG [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - > <Creating Hazelcast instance for members [[0.0.0.1, 0.0.0.2]]> > > DEBUG [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry > encryption/signing is enabled for [hazelcast]> > > > > Then later in the logs I see the following > > > > WARN [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory > is used as the persistence storage for retrieving and managing tickets. > Tickets that are issued during runtime will be LOST when the web server is > restarted. This MAY impact SSO functionality.>^[[m > > INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry > encryption/signing is turned off. This MAY NOT be safe in a clustered > production environment. Consider using other choices to handle encryption, > signing and verification of ticket registry tickets, and verify the chosen > ticket registry does support this behavior.> > > > > I am reviving this old thread, as it seemed to not have any response that > I can find. I am not able to find a solution for this issue just yet. Was > wondering if this has been resolved in a newer version? Or is there a work > around to ensure that the in-memory ticket registry is not being used? > Also is there any insight into the CP Subsystem not enabled warning? > > > > Thanks, > > -Jeremy > > > > *From:* cas-...@apereo.org <cas-...@apereo.org> *On Behalf Of *Christian > Schmidt > *Sent:* Friday, September 20, 2019 10:16 AM > *To:* CAS Community <cas-...@apereo.org> > *Cc:* mmoa...@unicon.net > *Subject:* Re: [cas-user] CAS 5.1.0-RC4 In-memory ticket registry still > starting when using Hazelcast ticket registry > > > > Hi, > > > > I just went through the logs of a new installation of 6.1 RC6 and found > the same logging entry like Matt with Version 5.1. > > > > 2019-09-20 16:38:26,277 DEBUG > [org.apereo.cas.config.HazelcastTicketRegistryConfiguration] - <Created > Hazelcast map configuration for > [DefaultTicketDefinitionProperties(cascade=false, > storageName=serviceTicketsCache, storageTimeout=10, storagePassword=null)]> > > ... > > 2019-09-20 16:38:33,655 INFO [org.apereo.cas.util.CoreTicketUtils] - > <Ticket registry encryption/signing is turned off. This MAY NOT be safe in > a clustered production environment. Consider using other choices to handle > encryption, signing and verification of ticket registry tickets, and verify > the chosen ticket registry does support this behavior.> > > > > Accoring to the logs HZ ist starting and according to netstat is is also > running as expected. > > > > > > I had a quick look at the soruces and there is no way around, that the > function ticketRegistry() in the CasCoreTicketsConfiguration class is > getting called after the HZ ticket registry is created > > > > > > --> where can I, as mentioned by Misagh, report this as a Bug? > > > > > > > > > > -- > - Website: https://apereo.github.io/cas > <https://secure-web.cisco.com/14QBSUrYePzL61bE32PgsjevzuxKR6dR8T7RsIKRH5PLKLHHPB1sz0bygAfcNGGkW7qkVHRv_M30uT6lNVBSWDWaAAH9AOI_MXdjb1nxGVzzp2DoSosviN_Zzk5oNSINUh8BC2ldV0cQxdT1btHAcw_gfcPjx7XHzMp0uZJsJDU6ghl5kxWZ1qImm9R63UpgTox0PDvLCEBR0IHzePwoCMGCThh8G7D4Of_U2MhCRA_iyG3CGdAJzKw4Lz_bz9V_Wjr1410TdIiJAKGWzV0TB3efcL3a7rINTNNPx3NKs2d20K-ozx5Bp_vy7ZolqEHHjFR8uxObZ3ZN8Sp94ltjNgIVUyC5-FFezfitrJ7by_eg/https%3A%2F%2Fapereo.github.io%2Fcas> > - Gitter Chatroom: https://gitter.im/apereo/cas > <https://secure-web.cisco.com/1nRTMSoYbE-GAIsO_1r7hLBVuSUlodygkpZFCTL3f5nSZabQKP0isEKMcuNMy8pvrhje7NbaXn_p_ATU2tPx83ZyzgJCLLG8-RNUMIbXr-DYdQ8Wp0VfZcllet5rdWwYXAFfEI9vn_iNHTHlfXNCp5DPi446EIJ4nZGrvCvwTQKBK-QFI3XLF4SRiQi0w81gaJJPJEBEEoPIBNcmK7zZbu5ThLF6J3dqtHf-9LOTcMmv9IpuYG7uY4_jd8JietfvB1hpQrp_N06xqjrULd3xOe-kF3CD458OmXEWb3k3yw2k80W1LQ46hFKfUoZPF6z_xZh9QqWvIda5-ixmjMKhNWg/https%3A%2F%2Fgitter.im%2Fapereo%2Fcas> > - List Guidelines: https://goo.gl/1VRrw7 > <https://secure-web.cisco.com/1HbTAAh6Py2AaMD4I4VuUtEyoK4AFwaVvDJ0w20vxj8nEPOo91WjhN_kaVIQheAYkmomoeFo03pWuGsDVCQHU_9A7bcB_CJ0BZJkugKEolYPpNa5A61y_atWJnC6CfoBwHS2izmWfVQGe1hj75K_hN7lOEWpUNcffznqwN9VVXlzW4w5MKKdi-eIbx2vhfOcHr7AgeF55i8f9k5tV8WEHCAVosE8bGRB5mKGeKmvy2VcxSlJKt0ZCTJg-vDUJcc7KcbLIE23Um3Xc2KZz-qA0A3V73KSYg_kvDLNCkOUZhH2NycV_gNw1PoLd8NQ8XaKrTyAkzuej5eOjkXbyDsnlXg/https%3A%2F%2Fgoo.gl%2F1VRrw7> > - Contributions: https://goo.gl/mh7qDG > <https://secure-web.cisco.com/1qShUvylkZ5vHxEvktyib-KVZJ-D4uH5-2n8beJ-Xgxs9Shlmi1HS500Ejijj-QJBytnQC2uxmqS0O4FbKPwNwDtUIO1Oa8p0XGpTYheRFz2P5KCd-CtvGbF1pwsj6YD7Ni2a2SDpLFdimjmWsA0VF3mQRiz9e7ef7yV0L186CcojcVfjYFEQ7noxywzz9FioDxCqYfno0qE1mlaIk5qKlJGOZ2KM1Vx3UdKn-_54uoB5nmlqK6sf1Vv88NCsy7NMImhSItgayObyccG9IFyl6fU5ZUNzB2L8gwjJdaFPdluhhZ-sZmtSVzjNuVFmK7owGcZG_UVTrS-wVQwy-niWPw/https%3A%2F%2Fgoo.gl%2Fmh7qDG> > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+u...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b448aa8-edac-44f7-925b-c1930227d29a%40apereo.org > > <https://secure-web.cisco.com/1vdhHpAS2HXmEemEqo8gTyh0O8oSD5x6kgaIa-zJjj_bCQj49sQBfIEIe9ehvloNheGw1M7aRvBgNhAUNraNglthwFhdkwH0bd2oGN4bZ92KQ3EZttjlzNCWV5JxhdOUrGFAHeGEjwZeV0Dm0ZGTI1u5A0G8UPbv-TaIMnoVIO9tGT6-Q-H3OI33ivwP1SpQgXFLYp15rP-ZahXyIrMajgGPzRXgWRefdeHv2vtkc9ig5ynpbUp4PFRFUjw_7oaQ07ptIB1WhyrshNxwJYA66Y5KhHPC6mAvj_kW8Xzwu5q-hMDUu9OZw-Dyk91mRO9LJg2PQfyKeJxq8baP0pszE-YJQvfcooNREHFR2r5X9Ymw/https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2F6b448aa8-edac-44f7-925b-c1930227d29a%2540apereo.org%3Futm_medium%3Demail%26utm_source%3Dfooter> > . > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c15d6d18-0351-4e65-94d1-f50bd7211c56n%40apereo.org.
