First thing you want to do is upgrade your LOG levels for both Ehcache and CAS and trace the ticket activity. The logs should tell you why tickets fail to be located. Either it’s a replication/network/RMI issue, or some delay in the process which causes tickets to be expired and then removed.
-- Misagh From: Ted Fisher <tffi...@bgsu.edu> Reply: Ted Fisher <tffi...@bgsu.edu> Date: March 31, 2016 at 3:37:02 PM To: cas-user@apereo.org <cas-user@apereo.org> Subject: [cas-user] cas-mfa with CAS 4.1.4 and ehcache We have gotten cas-mfa with CAS 4.1.4 running and configured with an ldap auth handler and duo authenticating OK and we are getting service tickets generated. Our next step was to get ehcache configured to use the same cache as our existing 3.5.0 CAs servers so that ST’s would go there and apps with CAS clients doing ticket validation could validate them there (this is all in our test env right now). From the looks of things STs and TGTs are the same so we should be able to share them like that. I was pleased to see that the wiki docs explained ehcache config as very similar to our exsiting – we are doing RMI replication now. I configured it pretty much the same as what we have now with the cache names changed to match our existing. It builds and no errors logged when running and I see packets being sent to the other RMI addresses, so it looks like STs are being sent out to ehcache. But, when the apps try to validate the ST they are not there. I tried turning logging up to debug and still I see no indications of any issue. Any pointers how to troubleshoot this ehcache issue? Is there a way for me to dump the STs in cache? It’s test and I can see that there are only a few there. I’d like to verify that they are making it there/. Thanks. Ted F. Fisher Information Technology Services From: Ted Fisher Sent: Thursday, March 17, 2016 9:43 AM To: 'cas-user@apereo.org' <cas-user@apereo.org> Subject: cas-mfa with CAS 3.5.3 I haven’t been able to find any step-by docs for adding Unicon’s cas-mfa with duo to our CAS server. I’ve tried following the instructions at https://github.com/Unicon/cas-mfa/ which results in a good build, but no duo authentication. I would assume that is because those instructions are for CAS 4.1.X. Is there anything that will tell me what I need to have in place and what settings are needed for CAS 3.5.3? I am trying to use cas-mfa version 1.0.0-RC2 since that looks to be the last that supported 3.5.X. I’ve tried quite a few variations based on posts I found from others, but nothing is leading to any progress here. README.md in 1.0.0-RC2 points to https://github.com/Unicon/cas-mfa/ which has instructions for 4.1.X, so I’m not finding anything on what this should look like. Any help would be appreciated. Environment: CAS 3.5.3 on Tomcat 7, 2 RHEL 6 servers using java version "1.7.0_95" Thanks. Ted F. Fisher Server Administrator 323 Hayes Hall Information Technology Services Email: tffi...@bgsu.edu Phone: 419.372.1626 -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
