Re: [cas-user] JVM Heap Kept Growing every day

2017-08-17 Thread David Malia
Is your ticket registry running on the same container as the application? Thanks, David Malia On Wed, Aug 16, 2017 at 1:01 PM, Uxío Prego <upr...@madiva.com> wrote: > I would reboot CAS servers nightly, if you can afford that. > > Try a TGT lifetime of several hours and an ST l

Re: [cas-user] JVM Heap Kept Growing every day

2017-08-19 Thread David Malia
It probably is a good idea to move Hazelcast to its own jvm at a minimum. It looks like the default behavior is to fill the cache until its at 85% of heap space. I got this by looking at https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#hazelcast-ticket-registry , so

Re: [cas-user] LDAP: UnknownHostException

2019-07-15 Thread David Malia
What the exception is really saying is that there is no known server with the name "adlocal.lan" If "nslookup adlocal.lan" doesn't return the IP of the server, you have some networking you might need to change or change the ldap URL to a resolvable address. On Mon, Jul 15, 2019 at 9:57 AM

[cas-user] Duo Universal Prompt no longer storing TGT cookie CAS 6.5.8.

2022-10-07 Thread David Malia
authentication flow, the TGT cookie is set as expected. Is this something expected? Thanks, David Malia -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message

[cas-user] Re: Duo Universal Prompt no longer storing TGT cookie CAS 6.5.8.

2022-10-10 Thread David Malia
After more debugging, I can see the TGT cookie being set with a max age of 0 during the Universal Prompt flow, but non-Duo enabled logins have the max age of the cookie being set to the configured cas.tgc.max-age property's value. On Fri, Oct 7, 2022 at 10:29 AM David Malia wrote: > He

Re: [cas-user] Issues while upgrading from CAS 5.3.3 to CAS 5.6.6

2022-08-17 Thread David Malia
These might work. #cas.authn.spnego.system.kerberos-conf= #cas.authn.spnego.system.kerberos-debug= #cas.authn.spnego.system.kerberos-kdc= #cas.authn.spnego.system.kerberos-realm= #cas.authn.spnego.system.login-conf= #cas.authn.spnego.system.use-subject-creds-only= On Wed, Aug 17, 2022 at 8:42 AM

Re: [cas-user] requiredIpAddresses specification?

2023-02-22 Thread David Malia
A CIDR range like 10.10.10.64/26 is acceptable in the list. I got that answer by looking at the source.I remember reading there is a way to have CAS Initilizer to list out the properties which I think listed out any documentation on the properties. I could be remembering wrong, and I don't

Re: [cas-user] enable risk-based Authentication

2023-02-18 Thread David Malia
upport-events-redis"" > and : > cas.events.redis.host=localhost > cas.events.redis.enabled=true > cas.events.redis.database=0 > > did i forget another option ? > > Le ven. 17 févr. 2023 à 21:59, David Malia a écrit : > >> >> https://apereo.github.io/c

Re: [cas-user] enable risk-based Authentication

2023-02-17 Thread David Malia
https://apereo.github.io/cas/6.5.x/authentication/Configuring-Authentication-Events.html I don't see a 'redis' option for storing the CAS Events. You might try a storage mechanism listed there. Thanks, David Malia On Tue, Feb 14, 2023 at 11:19 PM wouldsmina wrote: > Hello, > > In

Re: [cas-user] enable risk-based Authentication

2023-02-27 Thread David Malia
only needed if I had a redis >> cluster. However, I have events that are stored in redis. >> I will try to use influxdb storage (more simple). >> Thank you. >> >> >> >> Le dim. 19 févr. 2023 à 05:52, David Malia a écrit : >> >>> Weird, when

Re: [cas-user] CAS 7.0.0, how to scan self created beans, and manage by spring

2023-06-19 Thread David Malia
This isn't really a CAS issue, but rather understanding how Spring configuration works. Create a Spring configuration class with the following annotations adjusting accordingly to your environment. package some.package; @Configuration @ComponentScan(basePackages =