Hi Scott,

Thanks for your reply.

I opened https://issues.jasig.org/browse/CAS-937.

Meanwhile, I would like to disable all single signout, as you suggest, but I 
don't know how to do it. The WIKI says "Because not all clients support single 
sign out, you may need to disable it at the server level. Each 
ArgumentExtractor has a property called "disableSingleSignOut", which if set to 
true will make sure the callback does not occur", but it does not tell me much. 
Can you please help?

Thanks,
Moshe.

From: Scott Battaglia [mailto:[email protected]]
Sent: Tuesday, January 18, 2011 4:49 AM
To: [email protected]
Subject: Re: [cas-user] Ticket expiration triggers logout of all services 
(CAS-686) - why?

On Sun, Jan 16, 2011 at 4:17 AM, Moshe Ben Shoham 
<[email protected]<mailto:[email protected]>> wrote:
Hi,

This is mainly a question to CAS developers.

CAS-686 was fixed in 3.3.5. I would like to understand the motivation behind it 
and maybe override the behavior.

1. Why should a user be logged out of an application just because the CAS 
ticket expired, which is actually just because he/she did not login to another 
application? in the JIRA issue itself 
(https://issues.jasig.org/browse/CAS-686?page=com.atlassian.jira.plugin.system.issuetabpanels:changehistory-tabpanel#issue-tabs)
 it is mentioned that this behavior may not be appropriate to all systems, yet 
it was decided to implement it without an apparent way to override it. Why?

The typical thinking is that if a long-lived ticket has no longer been used, 
there is a high likelihood the user has walked away.  I can see however, how 
that might not be ideal for some people.


2. How can I override this behavior? I do not see it is configurable in any 
way. I can maybe extend TicketGrantingTicketImpl and implement expire() such 
that it does not invoke logOutOfServices(), but I do not see where I can 
configure CAS to use my implementation.

Its relatively easy to disable all single log out requests.  If you'd just like 
to disable it from the registry cleaner, open a ticket and I'll get the flag to 
enable/disable into CAS 3.4.6.

Cheers,
Scott

Thanks in Advance,
Moshe
--
You are currently subscribed to 
[email protected]<mailto:[email protected]> as: 
[email protected]<mailto:[email protected]>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to 
[email protected]<mailto:[email protected]> as: 
[email protected]<mailto:[email protected]>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

The information contained in this message is proprietary to the sender, 
protected from disclosure, and may be privileged. The information is intended 
to be conveyed only to the designated recipient(s) of the message. If the 
reader of this message is not the intended recipient, you are hereby notified 
that any dissemination, use, distribution or copying of this communication is 
strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to the message 
and deleting it from your computer. Thank you.



-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to