Here's probably more info about tickets than you ever wanted: http://jasig.github.io/cas/4.0.0/installation/Configuring-Ticketing-Components.html (Note: This is specific to CAS 4, but most of it will apply to other versions as well).
To actually make changes you can add settings to the cas.properties file that override defaults set in the spring-configuration/ticketExpirationPolicies.xml. (If you are using the maven overlay method, you can find the baseline file in subdirectories of target/war. --- *John Gasper* IAM Consultant Unicon, Inc. PGP/GPG Key: 0xbafee3ef On 11/11/14 9:31 PM, jeffrey tan wrote: > well, my probems are solved. the root cause of that is my > custom SavedRequestAwareAuthenticationSuccessHandler, so there is no > problems with the CAS4. is my client app. > > However how to set the lifecycle of the service ticket? or give some > hints where should i study? > > On Wednesday, November 12, 2014 12:57:07 PM UTC+8, Andrew Morgan wrote: > > Remember, Service Tickets are only valid once and only for a very > short > period of time (5 seconds I think). You can't "replay" the same ST. > > Andy > > On Tue, 11 Nov 2014, jeffrey tan wrote: > > > additional: > > > > when i debug and breakpoints, this problems keep recurring. > > However, when i disable all the breakpoints, and i go to client > application > > again,like localhost:8443/opscentral/, then will re-get the > service ticket > > and validate success. > > from my view, i may thinking this is related to the service > ticket life > > time. > > > > > > On Wednesday, November 12, 2014 10:45:23 AM UTC+8, jeffrey tan > wrote: > >> > >> the flow is like that, when i access client application, it > redirect to > >> CAS4 login page, after login, it will return service ticket to > client > >> application, > >> > >> then it stuck at > >> > > https://localhost:8443/opscentral/login?ticket=ST-4-Ydz5t2YSA01HzR664SrQ-cas01.example.org > > <https://localhost:8443/opscentral/login?ticket=ST-4-Ydz5t2YSA01HzR664SrQ-cas01.example.org> > > >> show me blank page. > >> > >> therefore i breakpoint debug it, i found that CAS4 return me > >> > >> <?xml version="1.0" encoding="UTF-8"?> > >> <SOAP-ENV:Envelope xmlns:SOAP-ENV=" > >> http://schemas.xmlsoap.org/soap/envelope/ > <http://schemas.xmlsoap.org/soap/envelope/>"><SOAP-ENV:Body> > >> <saml1p:Response > xmlns:saml1p="urn:oasis:names:tc:SAML:1.0:protocol" > >> IssueInstant="2014-11-12T01:40:46.574Z" MajorVersion="1" > MinorVersion="1" > >> Recipient="https://localhost:8443/opscentral/login > <https://localhost:8443/opscentral/login>" > >> ResponseID="_609bad71a819f013ce03be1e11e286e9"><saml1p:Status> > >> <saml1p:StatusCode > Value="saml1p:RequestDenied"/><saml1p:StatusMessage>Ticket > >> 'ST-10-ezYO9OgNYseArZmMRCct-cas01.example.org > <http://ST-10-ezYO9OgNYseArZmMRCct-cas01.example.org>' not recognized > >> </saml1p:StatusMessage> > >> </saml1p:Status></saml1p:Response></SOAP-ENV:Body> > >> </SOAP-ENV:Envelope> > >> > >> So i back to CAS4 and check it. i found the service ticket is > correct, but > >> i dont know why it return me ticket null after next line as > following > >> picture > >> > >> > >> > > <https://lh6.googleusercontent.com/-gRoFJ9xQHQQ/VGLI_kmdQuI/AAAAAAAABbs/lk-tNI6hy3c/s1600/cas.png > > <https://lh6.googleusercontent.com/-gRoFJ9xQHQQ/VGLI_kmdQuI/AAAAAAAABbs/lk-tNI6hy3c/s1600/cas.png>> > > >> > >> > >> > >> > > -- > > You are currently subscribed to [email protected] > <javascript:> as: [email protected] <javascript:> > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > <http://www.ja-sig.org/wiki/display/JSG/cas-user> > > -- > You are currently subscribed to [email protected] > <javascript:> as: [email protected] <javascript:> > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > <http://www.ja-sig.org/wiki/display/JSG/cas-user> > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
