Hi, Folks!

Do we really need to keep the CAS server web session? I have read that we
could set the repository-type="client" in the web flow executor as decribed
in "5.2.4 - A flow executor using a client-side continuation-based
execution repository" on the page
http://static.springsource.org/spring-webflow/docs/2.0-m2/reference/flow-executor.htmlso
that the flow state will be maintained through html hidden fields and
thus we cannot need the session affinity or replication. To me, this seems
an easier and less error-prone technique. Can someone confirm that this
works as expected in production environment?

Also, in order to use the "remember me" feature that needs long-term
persistence of the tickets, we choose to use couchbase in place of
memcached. Furthermore with couchbase we can scale this persistence layer
better than with memcached.

Cheers!

*Frederico Zveiter*


On Fri, Apr 5, 2013 at 5:29 AM, jleleu <[email protected]> wrote:

> Hi,
>
> It seems to be a very intensive documentation but things are pretty easy.
>
> First, in order to be able to login into the CAS server, you need to keep
> your web session (to retrieve the login ticket) : you can do that by
> session affinity or session replication.
>
> Then, you need to store your tickets so that all nodes can access them
> (not only the node on which you logged in even if you have a session
> affinity). It means :
> - for Ehcache and JBoss Cache, you need to configure replication
> - for BD and Memcached, as you have only one storage, you have nothing to
> do.
>
> Finally, the SSO session is hold by the CASTGC cookie which is set by
> default on the domain and path of the CAS server : it must be accessible by
> all nodes.
>
> Best regards,
> Jérôme
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to