Re: [cas-user] Re: cas-management error creating service

2022-11-09 Thread lanf detroy
it does not work. the application no longer launches. Here is the error: [2022-11-10 07:55:15] [info] 2022-11-10 07:55:15,391 WARN [org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext] - [2022-11-10 07:55:15] [info] 2022-11-10 07:55:15,456 ERROR [o

[cas-user] CAS 6.6.2 DUO problems

2022-11-09 Thread Chris
I am having a problem getting DUO to work with CAS 6.6.2, I am getting an error about action execution attributes were 'map[[empty]]', I think this is been caused by the following. 2022-11-09 13:03:58,807 WARN [org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityUniversalPromptValidateLoginA

Re: [cas-user] increasing ST time-to-kill

2022-11-09 Thread Ray Bon
Dave, The timeout (defaut 10s https://apereo.github.io/cas/6.6.x/ticketing/Configuring-Ticket-Expiration-Policy.html#service-ticket-policies) is a trade off between user experience and security. Ray On Tue, 2022-11-08 at 12:32 -0800, Dave Steiner wrote: Notice: This message was sent from outsi

Re: [cas-user] Re: cas-management error creating service

2022-11-09 Thread lanf detroy
I changed the permissions but it didn't change anything. Is there anything else to do? Le lundi 7 novembre 2022 à 19:09:52 UTC+1, Ray Bon a écrit : > lanf, > > You can change the group for the services directory and give it write > permissions. > > sudo chgrp --recursive tomcat /etc/cas/servi

Re: [cas-user] Re: cas-management error creating service

2022-11-09 Thread Ray Bon
lanf, This looks to be the default directory # mgmt.services-repo=/etc/cas/services-repo https://apereo.github.io/cas-management/6.3.x/installation/Configuration-Properties.html#properties Have you changed it in your management.properties? Ray On Wed, 2022-11-09 at 02:28 -0800, lanf detroy wr

Re: [cas-user] Re: Expiration policy using Hazelcast Ticket Registry (CAS 6.2)

2022-11-09 Thread Ray Bon
Dave, We experienced a similar issue. Hazelcast attempts to add tickets from the other servers but the timeouts differ. We use one config with 4 cas servers. Opted to take the hit and brought all 4 down. Outage was only a few minutes. I do like the idea of editing the hazelcast ips. Ray On Tue,