On Fri, Apr 30, 2010 at 2:50 PM, Jeff Chapin <[email protected]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> <snip />
>
> If you log in, and I shut down the node that you logged in to,
> refreshing the login page still results in a success.
>


If you have a TGT cookie available and you're not requesting a service
ticket, then the CAS server does not do an actual check to see if the TGT is
still valid.  It will just show that you were successfully authenticated.


>
> When either one node, or both nodes are up, no issues occur. Our test
> users can log in, access a protected service, access a second, and then
> log out.
>
> If one of the two nodes shutsdown, occasionally reach a screen saying
> you need to relogin -- but I am not able to recreate this outside of our
> test script.
>

Its possible you're shutting down the node before CAS has a chance to write
the value out to the database.



>
> This happens even if I explicitly force the cluster name into the cookie.
>

The cluster names in the cookie don't do anything.


Cheers,
Scott

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to