On Sat, Jan 28, 2012 at 5:57 AM, Fernando Correa <[email protected]> wrote: > Hi everyone! > > I have doubts between TimeoutExpirationPolicy and > HardTimeoutExpirationPolicy policies for TGTs. > > With HardTimeoutExpirationPolicy, if I put 120 seconds, I understand that a > request in second 121 will redirec me to the login page. > > With TimeoutExpirationPolicy, if I put 120 seconds, and I use the TGT inside > this 120 seconds, I get another 120 seconds. My question is, what does "use > the TGT" mean? What kind of action refresh my TGT for another 120 seconds?
"use the TGT" essentially means that it was used to vend a Service Ticket. This happens when a user requests access to a service. If you're on 3.4.11, you could consider using TicketGrantingTicketExpirationPolicy which provides both the sliding window and a hard time out. Best, Bill -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
