> Is there a way in CAS to administratively invalidate/destroy a TGT(s) for a given principal?

There's no UI for this, but it should be straightforward to build a ticket registry-specific implementation. In all cases it's a matter of deleting the ticket. For example, in the case of JpaTicketRegistry just issue a delete query against the underlying database:

delete from ticketgrantingticketimpl where id = 'TGT-ID-tbd' CASCADE

For memcached you could issue a command like the following in a terminal:

echo delete TGT-ID-tbd | nc memcached.example.com 11211

I believe there may some JMX components for Ehcache you could leverage for EhcacheTicketRegistry.

M

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to