> Is there a way in CAS to administratively invalidate/destroy a TGT(s)
for a given principal?
There's no UI for this, but it should be straightforward to build a
ticket registry-specific implementation. In all cases it's a matter of
deleting the ticket. For example, in the case of JpaTicketRegistry just
issue a delete query against the underlying database:
delete from ticketgrantingticketimpl where id = 'TGT-ID-tbd' CASCADE
For memcached you could issue a command like the following in a terminal:
echo delete TGT-ID-tbd | nc memcached.example.com 11211
I believe there may some JMX components for Ehcache you could leverage
for EhcacheTicketRegistry.
M
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user