Hi Danny Is your configuration without CAS a public configuration meaning no security at all. ? Does it make a difference if you use basic auth instead of CAS ?
Normally, the initial request should last longer. Cheers Christian On Mon, Oct 19, 2015 at 8:15 PM, Danny Cheng <[email protected]> wrote: > Hi Christian, > > > > I checked the log and have confirmed that only the initial GeoServer > request is hitting CAS – which is good. Maybe the 100ms difference with CAS > on/off is just an one-off result. > > > > Thanks, > Danny > > > > > > *From:* Christian Mueller [mailto:[email protected]] > *Sent:* Monday, October 19, 2015 7:43 AM > *To:* Andrea Aime > *Cc:* Danny Cheng; [email protected] > *Subject:* Re: [Geoserver-users] GeoServer w/ CAS Performance > > > > Hi Andrea > > > > For stateless authentication we have a cache to avoid the overhead for > each request. > > > > Additionally, you can allow session creation for each filter chain > individually (in this case the cache is not used). > > > > I am waiting for the reply of Danny, maybe there is a bug. > > > > Cheers > > Christian > > > > > > On Mon, Oct 19, 2015 at 9:54 AM, Andrea Aime <[email protected]> > wrote: > > Christian, > > thinking out loud here, we normally setup OGC services so that they don't > create a session > > because of the many clients hitting the server and the cost of keeping > sessions. > > > > However, for stuff like CAS where an authentication can make us do a > network call, would it be better > > to advise allowing session creation instead? Or do we have other caching > strategies? > > > > This is more of a general question, it may or not related to Danny's > problem > > > > Cheers > > Andrea > > > > > > On Sun, Oct 18, 2015 at 3:18 PM, Christian Mueller < > [email protected]> wrote: > > Hy Danny > > > > Please check the log file of the CAS Server. There you can see the > incoming requests and check if each GeoServer request triggers a CAS > request. > > > > Cheers > > Christian > > > > > > > > On Sun, Oct 18, 2015 at 4:34 AM, Danny Cheng <[email protected]> > wrote: > > Hi, > > > > I currently have a system with CAS single sign on integrated. I noticed > that with CAS enabled my OGC requests are taking ~100ms longer to get a > response. Is this expected? I would expect that only the initial request > would get a hit, but for me all my requests are taking the hit. > > > > Thanks, > > Danny > > > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Geoserver-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > > -- > > DI Christian Mueller MSc (GIS), MSc (IT-Security) > > OSS Open Source Solutions GmbH > > > > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Geoserver-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > > -- > > == > > GeoServer Professional Services from the experts! Visit > > http://goo.gl/it488V for more information. > > == > > > > Ing. Andrea Aime > > @geowolf > > Technical Lead > > > > GeoSolutions S.A.S. > > Via Poggio alle Viti 1187 > > 55054 Massarosa (LU) > > Italy > > phone: +39 0584 962313 > > fax: +39 0584 1660272 > > mob: +39 339 8844549 > > > > http://www.geo-solutions.it > > http://twitter.com/geosolutions_it > > > > *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* > > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > > > ------------------------------------------------------- > > > > > > -- > > DI Christian Mueller MSc (GIS), MSc (IT-Security) > > OSS Open Source Solutions GmbH > > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH
------------------------------------------------------------------------------
_______________________________________________ Geoserver-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
