mike-jumper commented on issue #455: GUACAMOLE-361: CAS global logout
URL: https://github.com/apache/guacamole-client/pull/455#issuecomment-565766176
 
 
   > Unless someone implements a time limit on Guacamole logins (which I’m not 
aware of, if it exists) ...
   
   See the `api-session-timeout` property: 
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#initial-setup
   
   > ... we should probably modify the CAS extension to “never check a ticket 
if it already validated the one it has.” (Note: I’ve only observed the 
extension trying to revalidate tickets in the context of a “reload” that 
doesn’t clean up it’s URL and still includes the ST, so it’s not a “common” 
problem but still something that it should never usefully try to do, unless we 
use the exception to logout or redirect back to CAS to get a renewed ticket).
   
   The ticket is only validated during initial authentication with Guacamole. 
You would only see another validation attempt if the user's Guacamole session 
has been invalidated (timed out, manually logged out, etc.).

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to