> When people view my CAS login page, and they wait a long time > (5 minutes or something), and then they log in, they go to the generic error > handler > page.
That shouldn't happen. The expected behavior is to get a blank login form. We have custom config to intercept the Spring Webflow exceptions that occur on an expired session. What CAS version? > Or would it be possible to increase this timeout to a lot more, like an hour? Yes. Set the session timeout in the web.xml to whatever value you like. It's 5m by default since we only need to hold session data for a short period to get the user's credentials and authenticate them. We may really need to investigate a more robust solution for graceful session timeouts -- this issue comes up fairly often. I will say some folks have implemented javascript pings to keep the session alive, but my reaction to that is a hearty "yuck." M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
