> On Jul 16, 2015, at 8:09 PM, Bryan Wooten <[email protected]> wrote: > > Our CAS servers (3.4.12) are using the default Service Ticket timeout of 10 > seconds. We have 3 servers in 2 data centers clustered with a Hazelcast > ticket registry. > > Lately we have been seeing ST Validations failing because the ticket is > expired. We are thinking of changing the timeout to either 15 or 20 seconds. > > Any thoughts on this? I know about the security implication but don’t believe > that this creates a significantly increased risk.
Don’t think so.You may want to investigate the reason behind the timeout but a 20 second window is fine too. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
