Thank you Jérôme, it's working well. I'm now trying openID , I'll soon have other questions :)
________________________________ De : Jérôme LELEU [[email protected]] Date d'envoi : jeudi 5 décembre 2013 15:05 À : [email protected] Objet : Re: RE : [cas-user] RememberMe in 3.5.2 Yes, the internal expiration policy and the cookie lifetime must be the same... 2013/12/3 HURTEVENT VINCENT <[email protected]<mailto:[email protected]>> Ok, maybe I finally understand these values :) SessionExpirationPolicy is the lifetime (in millisecond) of the TGT without RememberMe. RememberMeExpirationPolicy is the lifetime (in millisecond) of the TGT with RememberMe. and we need to set the remembeMeMaxAge (in seconds) in ticketGrantingTicketCookieGenerator to define CASTGC lifetime. So, if we want to be ok, we need to set the same lifetime between RememberMeExpirationPolicy and remembeMeMaxAge, so, for 7 days: 604800000 milliseconds and 604800 seconds. Right ? De : HURTEVENT VINCENT [[email protected]<mailto:[email protected]>] Date d'envoi : mardi 3 décembre 2013 15:20 À : [email protected]<mailto:[email protected]> Objet : RE : [cas-user] RememberMe in 3.5.2 Hi Jérôme, I put 7 days into millisecond (604800000) as rememberMeExpirationPolicy but the CASTGC has a 3 months lifetime, I suppose it hits the rememberMeMaxAge. I don't understand If we have to enter seconds or milliseconds, specs of rememberMe expiration policies and "regular" policies seems different. My ticketRegistry.xml looks like this : <bean id="grantingTicketExpirationPolicy" class="org.jasig.cas.ticket.support.RememberMeDelegatingExpirationPolicy"> <property name="sessionExpirationPolicy"> <bean class="org.jasig.cas.ticket.support.TimeoutExpirationPolicy"> <constructor-arg index="0" value="7200000" /> </bean> </property> <property name="rememberMeExpirationPolicy"> <bean class="org.jasig.cas.ticket.support.TimeoutExpirationPolicy"> <constructor-arg index="0" value="604800000" /> </bean> </property> </bean> I change sessionExpirationPolicy to lot higher value (2hours), I think it's that why, i had to relogin each time (as describe in my earlier mail), but the rememberMe value seems weird. De : Jérôme LELEU [[email protected]<mailto:[email protected]>] Date d'envoi : mardi 3 décembre 2013 14:44 À : [email protected]<mailto:[email protected]> Objet : Re: [cas-user] RememberMe in 3.5.2 Hi, Just after a successful login with remember-me checked, what is the expiration date of your CASTGC cookie ? The web session or a specific date ? Thanks. Best regards, Jérôme 2013/12/3 HURTEVENT VINCENT <[email protected]<mailto:[email protected]>> Hello, I fixed my problem with ClearPass functionnality and now, I'm trying to get RememberMe working. I'm with CAS server 3.5.2 and following the documentation available for the 3.4.2 on CASUM, it's not working. First, I don't understand how the value for ExpirationPolicies works, then, when I check or I don't check the rememberMe box, and when I'm already logged in CAS and I want to log me in another CASsified app, I have to relog in even the TGC has a lifetime of 3 months. Here's the output of the cas server log : 2013-12-03 09:58:28,274 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://sandbox.univ-lyon1.fr/cas/examples/example_simple.php 2013-12-03 09:58:28,274 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr<http://TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr>] 2013-12-03 09:58:28,274 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr<http://TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr>] found in registry. 2013-12-03 09:58:28,275 DEBUG [org.jasig.cas.extension.clearpass.TicketRegistryDecorator] - Removing mapping ticket [TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr<http://TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr>] to user name [vincent.hurtevent] 2013-12-03 09:58:28,275 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing ticket [TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr<http://TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr>] from registry 2013-12-03 09:58:28,275 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr<http://TGT-7-YkVdeWJlnU2BFhjdfeDfb6onePFccgarTS7aLXSyprdW9JoKLf-cas.univ-lyon1.fr>] I'm working with the default ticket registry for now. Could someone explain me how set expiracy values ? Has someone succeeded in having RememberMe working with version 3.5.2 ? Thank you -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
