correct, no new code needed to disable singlesignout, but implementing a default serviceurl ended up having to overlay a few classes to make things public, and that is why i found this.

I understand why it is on the arg extractors to a certain extent, because that makes it easy to separately enable/disable signout for various request types (saml, cas). But the fact that the coupling between CasArgumentExtractor & SimpleWebApplicationServiceImpl & single sign out is completely hidden from the controllers/flow-actions makes decorating service management tricky.


Cheerio,

Michael Johnston
[email protected]




On 14-Jan-09, at 7:33 PM, Dale Ogilvie wrote:

You need the following in WEB-INF/spring-configuration/ argumentExtractorsConfiguration.xml

<bean id="casArgumentExtractor" class="org.jasig.cas.web.support.CasArgumentExtractor ">
        <property name="disableSingleSignOut">
            <value>true</value>
        </property>
    </bean>

No new code required. Spring does the necessary.

From: [email protected] [mailto:cas- [email protected]] On Behalf Of Scott Battaglia
Sent: Thursday, 15 January 2009 4:11 p.m.
To: Yale CAS mailing list
Subject: Re: How do I turn off single sign out in CAS3.2+

You can control whether single sign out is enabled or not either by using that parameter on the argument extractor, or based on whether you provide an HttpClient or not (if you don't provide one then it can't make HTTP calls, i.e. logout ;-)).

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia


On Wed, Jan 14, 2009 at 9:49 PM, Michael Johnston <[email protected]> wrote:
(And also the fact that "cleanupUrl", which is necessary for services to be comparable & recognizable, is protected, but for that we can make a subclass of SimpleWebApplicationServiceImpl, which I suppose doesn't count as modifying CAS code)

Well, actually not it is final.

Cheerio,

Michael Johnston
[email protected]







On 31-Jul-08, at 5:36 PM, Scott Battaglia wrote:

You should be able to set it on the CasArgumentExtractor. Set the "disableSingleSignOut" property to true.

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia


On Thu, Jul 31, 2008 at 6:50 PM, dale77 <[email protected]> wrote:

Can some kind soul please help me out with the configuration to prevent CAS
posting single sign out xml back to services?

Our CAS server lives in a DMZ that has no DNS access, so when the TGT is destroyed the system hangs as CAS tries to post back to hosts it cannot resolve... I believe that single sign out is turned on by default, hence the
need to switch it off in our system.

I expect it will be simply a bean modification in deployerConfigContext.xml.
Does anyone know the necessary spring incantation?

Thanks!

Dale
--
View this message in context: 
http://www.nabble.com/How-do-I-turn-off-single-sign-out-in-CAS3.2%2B-tp18765177p18765177.html
Sent from the CAS Users mailing list archive at Nabble.com.

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas


_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas


_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to