Yes, others do deal with the issue you are describing. In our case, our portal (uPortal) is in a cluster (4 machines) and required delivery of the PGT back to the specific server that originated the CAS call.
We accomplished this by defining 4 PGT callback URIs. For example:
https://my.university.edu/portal/host1
https://my.university.edu/portal/host2
https://my.university.edu/portal/host3
https://my.university.edu/portal/host4
The host information in the URI was then used to route the PGT callback request to the correct server in the cluster.
An alternative implementation could be like you described, using a backend DB or distributed hash to "share" the PGT between the servers in your cluster.
Dan
----- Original Message -----
From: Mikkel Refsgaard Bech <[EMAIL PROTECTED]>
Date: Tuesday, September 12, 2006 5:52 am
Subject: Proxying cas-application in a cluster
To: Yale CAS mailing list <[email protected]>
> Hi,
>
> We want to setup an application that uses proxt granting tickets
> (PGT),in a cluster. Our application (a CMS system) uses proxying
> to do the
> authorization. That is; when a user logs in, the CMS system contacts
> another system the get the user's permissions via a proxy
> ticket. This
> works fine in a non-clustered setup. But when the CMS is
> clustered the
> callback from CAS ends up in the cluster as well, which potentially
> results in a PGT on one of the other systems than the user
> logged in to.
> The login from the CMS to the authorization system fails because that
> particular instance of the CMS never recieved the PGT.
>
> I've searched the wiki and the mailing lists for a solution, but have
> not found anything or anyone having this problem.
>
> Has anyone had the same problem?
>
> Which obvious solution can I not see? / How did you solve it?
>
> The solution to this could be to make the CMS instances share
> the PGT's.
> Anyone tried this?
>
> Regards,
> Mikkel
> Aalborg University
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
--
Dan Mindler
Consulting Application Developer
Enterprise Systems & Services, Rutgers University
voice: 732 445-5429 | fax: 661 770-9330 | [EMAIL PROTECTED]
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
