Marvin Addison wrote:
>
> We have found in our testing of the SAML ticket validator that the
> default 1s is too strict for our environment in many cases. We
> typically increase to whatever is needed to account for reasonable
> clock drift. I would recommend using the smallest value needed to get
> past that error. I'm curious -- are you using NTP for time
> synchronization on both the CAS client and server? If not, you
> probably should be for a number of reasons. Even with NTP sync you
> may need to increase the tolerance of the SAML validator.
>
Yes in production we will use NTP but in our development environment we
didn't have access to an NTP server. Furthermore we are using virtual
machine and usually the clock on vm it's very unstable.
Thanx.
--
View this message in context:
http://www.nabble.com/Cas-and-time-synchronization-tp24969561p24971795.html
Sent from the CAS Users mailing list archive at Nabble.com.
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
