Andrew Feller wrote:
> In CAS 3.2.X, there was a change in the Spring configuration such that
> the hostname of the server is being included automatically within the
> Spring beans used to generate tickets.

Hmm, in some environments it might not be acceptable for security reasons that
the real hostname of the CAS server is revealed to the browser. How about
generating a UUID (random-based, not the MAC address variant!) on every
startup and append that to the ticket?

Ciao, Michael.

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to