> Can't we just use registered service improvement to register all the > machine in the load balancer?
No. The CAS server records the services visited by a user during a CAS session according to the initial entry point into the application that requests a CAS service ticket. It is these URLs exactly that are replayed at single sign-out time to end CAS client sessions. (This behavior could, of course, be changed, but I imagine it would be a signficant architectural change for the implementation of registered services and/or single sign-out.) Presumably the DNS entries for the cluster are different from those of the nodes, so registering the nodes would be of no help since the user would only ever visit the service by the cluster name. CAS would then call back to the cluster address directly, and would be routed to a cluster node that could be different from that used by the end user. Again, the only obvious solution here is replicated session state where killing the session on one node is equivalent to killing them all. M _______________________________________________ cas-dev mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas-dev
