Marvin Thank You,

Almost have it working, so many, many thanks. 

One last question. I'm using JPA for Ticket Registry, is there anyway to
identify what tickets belong to whom.
I.E I want to retrieve all tickets that are related by a username. So i
can invalidate them.

However it looks like this data is located within the Authentication
Object thats serialized.

Due to the amount of users we anticipate, iterating through all the
tickets with a for loop is not scalable. 


I'm thinking of storing the TGT's against the user in LDAP so I can
easily Invalidate them with the TGT id.
Are there any other options indeed of this?




James Parry
Specialist Developer

MegaNexus Limited


-----Original Message-----
From: Marvin Addison [mailto:[email protected]] 
Sent: 29 June 2011 14:32
To: [email protected]
Subject: Re: [cas-user] Cas to limit users to a single authenticated
session.

> Would i need to work out what services tickets are valid for each
server or would the single sign-out do that for me?

Destorying the user's TGT is all you need to do; this triggers
invalidation of existing service tickets and issues the single
sign-out calls to services visited during the SSO session.

> Any idea where I should look to get more details on how the single
sign out actually works.

Study the source of the following classes:
 - CentralAuthenticationServiceImpl (destroyTicketGrantingTicket)
 - AbstractWebApplicationService (logOutOfService)
 - HttpClient

M

-- 
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user



 

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 6250 (20110629) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
  

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 6251 (20110630) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
  

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 6252 (20110630) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
 
 

__________ Information from ESET NOD32 Antivirus, version of virus
signature database 6252 (20110630) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
 

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to