I have figured it out:
    when logging in using the url https://cas-server/cas/login  -> it
creates a secure cookie on the browser ( TGT )

    If you go to http://cas-server/cas/logout -> It says Logout
successful even though it did not find the secure TGT cookie - nothing
shows up in the logs

    But going to https://cas-server/cas/logout   will correctly
perform single sign out.


Should I file a bug in JIRA on this ?

-Stephen More


On Wed, Dec 7, 2011 at 1:15 PM, Stephen More <[email protected]> wrote:
> I have 1 CAS server behind apache.
>
> My CAS clients are also behind the same apache.
>
>
> <bean id="entityManagerFactory"
> class="org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean">
>                <property name="dataSource" ref="casDataSource"/>
>                <property name="jpaVendorAdapter">
>                    <bean
> class="org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">
>                        <property name="generateDdl" value="true"/>
>                        <property name="showSql" value="true" />
>                    </bean>
>                </property>
>                <property name="jpaProperties">
>                    <props>
>                        <prop
> key="hibernate.dialect">org.hibernate.dialect.MySQLDialect</prop>
>                        <prop key="hibernate.hbm2ddl.auto">update</prop>
>                    </props>
>                </property>
>            </bean>
>
>    <bean id="transactionManager"
> class="org.springframework.orm.jpa.JpaTransactionManager">
>        <property name="entityManagerFactory" ref="entityManagerFactory"/>
>    </bean>
>
>    <tx:annotation-driven transaction-manager="transactionManager"/>
>
>        <bean id="serviceRegistryDao"
> class="org.jasig.cas.services.JpaServiceRegistryDaoImpl"
> p:entityManagerFactory-ref="entityManagerFactory">
>        </bean>
>
>
> -Stephen More
>
>
> On Wed, Dec 7, 2011 at 12:56 PM, Marvin Addison
> <[email protected]> wrote:
>>> SSL is provided by apache - utilizing JkMount
>>
>> Do you have more than one CAS server behind Apache?  That's vitally
>> important.  If yes, then what ticket store are you using?
>>
>> M
>>
>> --
>> You are currently subscribed to [email protected] as: 
>> [email protected]
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to