> an easy way to generate an ST that is not
> immediately redeemed is simply to obtain a ST to a service URL that doesn't
> know how to validate it, e.g.
>
> https://yourcasserver/cas/login?service=http://www.unicon.net
>
> That'll redirect you to the Unicon website with the ST in the URL but
> without validating that ST.

Excellent suggestion.  I actually do this frequently for testing, but
I've never considered it for getting a valid ticket.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to