On Fri, Sep 7, 2012 at 2:50 PM, Garey Mills <[email protected]> wrote:
> Hello -
>
>     I am trying to get a CAS-protected Java servlet app to use a web
> service, so as I understand it the web service will have to accept proxy
> tickets.
>     I am told by the person who is CASifying the web service that I will
> have to send a new proxy ticket with each request to the web service. Is
> this doable? Is it usual? Does it make sense?

Doable? yes

Usual? hard to say

Does it make sense? maybe.  If the servlet app is making very
infrequent requests to the target web service, getting a new proxy
ticket for each request could be reasonable.   If the app is making
frequent repeated requests or has to carry on a stateful conversation
you might want to consider using the PT as a sort of session
identifier (or some other mechanism) for repeated requests after
validation.

Best,
Bill


>
> Thanks for any input;
>
> --
> Garey Mills
> Library Systems Office
> UC Berkeley
>
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to