hi, I was wondering if the embedded Tomcat in CAS 5.0.x is deemed fit for use in a production environment. E.g. will CAS receive timely security updates if any security issues are reported for the embedded Tomcat.
I ask this because we are in the process of upgrading to CAS 5 but our servers will be running Red Hat 6. There doesn't seem to be an official repository for a Tomcat beyond 7 for RH6, so it would be very nice if we can just use the embedded Tomcat instead. The docs seem a bit ambiguous about the subject. A quote from https://apereo.github.io/cas/5.0.x/planning/Installation-Requirements.html *[..]* *Servlet ContainersThere is no officially supported servlet container for CAS, but Apache Tomcat is the most commonly used. Support for a particular servlet container depends on the expertise of community members**[..]* but that page also refers to https://apereo.github.io/cas/5.0.x/installation/Configuring-Servlet-Container.html, where I am told *[..]* *EmbeddedNote that CAS itself ships with an embedded Tomcat container that allows the platform to be self contained as much as possible. You DO NOT need to configure and deploy to an externally configured container.* *[..]* Which kind of sounds like it is somewhat supported :) Ernst-Jan -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/76933118-03b4-4bec-9d4e-6fa7fdc9fc4a%40apereo.org.
