Hi Kevin, your are right but I have to overcome one obstacle with actual installation of CAS.
Why do users logged in via SPNEGO suddenly get to the login screen? Is it because the token timed out? We habe TGT time of 1 week. Is it because users have got a token from dev and visited a production webapp? Is it just a specific webapp? We have five or more casified webapps but about 4000 users not patient enuogh to give us valuable feedbacks. In total about 5% of the users arrive at the login screen and have to close their Internet Explorer or even File Explorer to be able to browse the sites again. It is somewhat desperate serach. best regards Nick Am Dienstag, 25. September 2012 15:33:41 UTC+2 schrieb Kevin P. Foote: > > > I suppose you could make them "trust" each other.. There are probably a > few different ways to do this; trusted auth, etc.. > > However, I'd look back at your use cases.. Generally your "dev" CAS > server should only be used by a small known subset population.. to test > things out for you and for your changes/test mid day. :-) > > I would not open my dev/test CAS host up to my general pop. Which, > consequently would cause confusion and me a headache among other things. > > HTH > > ------ > thanks > kevin.foote > > On Tue, 25 Sep 2012, Nicolaie Szabadkai wrote: > > -> Hi, > -> > -> I have setup two CAS-Clusters with SPNEGO, AD and LDAP. > -> One for development and one for production. > -> The LDAP is unique for each stage. > -> Everything works well. > -> > -> Sometimes, and I guess it has to do with users switching from DEV to > TEST or back, users get the login screen. > -> This is annoying and confuses the users. > -> > -> I need an advice what option dig into: > -> * Create a trust relationship between the two CAS or > -> * One big CAS-Cluster that covers all areas of authetications > -> > -> Thanks for your contribution! > -> > -> Cheers > -> Nicolaie > -> -- > -> You are currently subscribed to [email protected] <javascript:>as: > [email protected] <javascript:> > -> To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -> > > -- > You are currently subscribed to [email protected] <javascript:> as: > [email protected] <javascript:> > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
