Thanks for you help. Does the CAS documentation have the 
ticketExpirationPolicies.xml config explained? Is it in seconds? We are 
actually looking for a CAS expert maybe to hire for a project.

-----Original Message-----
From: Marvin Addison [mailto:[email protected]]
Sent: Friday, April 30, 2010 1:11 PM
To: [email protected]
Subject: Re: [cas-user] CAS redundancy and token time outs

> Does anyone know if DNS redundancy recommended for CAS failover? (like
> dynamic dns?)

Round-robin DNS is not a reasonable solution for a HA CAS service.
We've discussed the justification for that comment recently; search the list 
archives if you're interested.  For true HA you need some sort of device that 
routes requests to multiple CAS nodes, either a true hardware load balancer or 
a software solution like an Apache reverse proxy.

> Also, would anyone know where the time out setting is for a CAS token?

CAS ticket lifetimes can be controlled via policies with various settings, 
http://www.ja-sig.org/wiki/display/CASUM/Ticket+Expiration+Policy.
 The default for the TGT is sliding scale expiration with 2-hr timeout.  Both 
TGT and ST expiration policies are found in the ticketExpirationPolicies.xml 
config file.

M

--
You are currently subscribed to [email protected] as: [email protected] 
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user



This e-mail message (including attachments, if any) is intended for the use of 
the individual or entity to which it is addressed and may contain information 
that is privileged, proprietary, confidential and exempt from disclosure.  If 
you are not the intended recipient, you are notified that any dissemination, 
distribution or copying of this communication is strictly prohibited.  If you 
have received this communication in error, please notify the sender and erase 
this e-mail message immediately.


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to