RE: [cas-user] No Spring Webflow debug logging

2011-10-11 Thread Kirk, Matt
our log4j files. You'll have to change that line. On Tue, Oct 11, 2011 at 11:44 AM, Kirk, Matt mailto:matt.k...@bskyb.com>> wrote: Hi All, I can't seem to get any Spring Webflow debug logging output from CAS with the below log4j.properties. Anyone seen this behaviour and

[cas-user] No Spring Webflow debug logging

2011-10-11 Thread Kirk, Matt
Hi All, I can't seem to get any Spring Webflow debug logging output from CAS with the below log4j.properties. Anyone seen this behaviour and knows how to see the output? Thanks, Matt log4j.rootLogger=DEBUG, R log4j.appender.R=org.apache.log4j.FileAppender log4j.appender.R.File=target/logs/ca

RE: RE:[cas-user] re:CAS 3.4.10 - CustomPasswordAuthenticationHandler - RESTFul API issue

2011-10-11 Thread Kirk, Matt
Hi Pietro, Hmmm, seems strange. The exception being logged is happening when CAS is trying to create a TGT - which you already have. Have you change any other config? Ticket expiration policies perhaps which might have caused the original TGT to become invalid? I'm just guessing really. Re

RE: re:[cas-user] CAS 3.4.10 - CustomPasswordAuthenticationHandler - RESTFul API issue

2011-10-11 Thread Kirk, Matt
Hi Pietro, Are you sure you have successfully authenticated using the Rest API? The log you attached shows the following entry before the exception showing an authentication failure: 2011-10-11 10:48:27,109 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - 2011-10-11 10:48:27

RE: [cas-user] FastBindLdapAuthenticationHandler thread limits

2011-10-10 Thread Kirk, Matt
with pooled = true and see it call conn.cleanup when instead when pooled = false. So I think I've found the cause of the log running connections. Regards, Matt ____ From: Kirk, Matt [matt.k...@bskyb.com] Sent: 07 October 2011 17:16 To: cas-user@lists

RE: [cas-user] FastBindLdapAuthenticationHandler thread limits

2011-10-07 Thread Kirk, Matt
Hi Marvin, As requested: $ uname -a Linux uncsg07a 2.6.18-238.12.1.el5 #1 SMP Sat May 7 20:18:50 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux $ /apps/java/jdk-1.6/bin/java -version java version "1.6.0_10" Java(TM) SE Runtime Environment (build 1.6.0_10-b33) Java HotSpot(TM) 64-Bit Server VM (build

RE: [cas-user] Stateless CAS

2011-10-07 Thread Kirk, Matt
nformation Technology Svs Sys Programming & Supt Team Ld From: "Kirk, Matt" mailto:matt.k...@bskyb.com>> Reply-To: mailto:cas-user@lists.jasig.org>> Date: Fri, 7 Oct 2011 15:54:36 + To: mailto:cas-user@lists.jasig.org>> Subject: RE: [cas-user] Stateless CAS Hi

RE: [cas-user] Stateless CAS

2011-10-07 Thread Kirk, Matt
lustering all of the state. :) Hope this helps, Andrew On 10/06/2011 01:04 PM, Kirk, Matt wrote: Hi Scott / Marvin, We may have a need to make CAS stateless such that in a cluster any server could process the login form submit even if that server didn't serve the page in the first pla

[cas-user] FastBindLdapAuthenticationHandler thread limits

2011-10-07 Thread Kirk, Matt
Hi All, During performance testing of our CAS cluster the testers have been seeing "SocketException: Too many open files" as described at the end of this email. CAS is configured with the FastBindLdapAuthenticationHandler. Is it possible to use a pooled context source with this configuration?

[cas-user] Stateless CAS

2011-10-06 Thread Kirk, Matt
Hi Scott / Marvin, We may have a need to make CAS stateless such that in a cluster any server could process the login form submit even if that server didn't serve the page in the first place. (don't ask) I was wondering what your thoughts were on this. Having a look at the code I was wonderin

RE: [cas-user] Login Ticket in CAS Cluster

2011-10-04 Thread Kirk, Matt
experience. -Andrew On Oct 4, 2011, at 6:06 AM, Kirk, Matt wrote: Hi, Can someone tell me what the CAS behaviour should be in a clustered environment WITHOUT Tomcat session replication or sticky session? Is this even possible? E.g. Setup: Load balancer (round robin, not sticky) CAS-1 CAS-2 User

RE: [cas-user] Login Ticket in CAS Cluster

2011-10-04 Thread Kirk, Matt
ser] Login Ticket in CAS Cluster You would need to cluster the HTTP session, which is where Spring Web Flow holds the login tokens. Cheers, Scott On Tue, Oct 4, 2011 at 6:06 AM, Kirk, Matt mailto:matt.k...@bskyb.com>> wrote: Hi, Can someone tell me what the CAS behaviour should b

[cas-user] Login Ticket in CAS Cluster

2011-10-04 Thread Kirk, Matt
Hi, Can someone tell me what the CAS behaviour should be in a clustered environment WITHOUT Tomcat session replication or sticky session? Is this even possible? E.g. Setup: Load balancer (round robin, not sticky) CAS-1 CAS-2 User visits http://loadbalancer/cas/login Load balancer forwards to

RE: [cas-user] CAS 3.4.10 http / https redirect error

2011-10-01 Thread Kirk, Matt
rarely redirects (except possibly if the session timeouts on the login page). On Thu, Sep 29, 2011 at 11:22 AM, Kirk, Matt mailto:matt.k...@bskyb.com>> wrote: Scott / Marvin, Thanks for the help earlier, got another one... Getting an unexplainable intermittent scenario whilst trying to ma

RE: [cas-user] Under what conditions does CAS respond with a 302 redirect?

2011-09-30 Thread Kirk, Matt
Thanks Marvin, I had found what you referenced below re the services manager, but this is not the services manager that is giving us a problem. I found the redirect in index.jsp but we're experiencing some strange behaviour intermittently when running multiple nodes behind a load balancer. Oc

RE: [cas-user] SSL offload and HTTPS warning?

2011-09-30 Thread Kirk, Matt
Hi Andrew, I think it will be why you are seeing that error. There is a check in the default JSP which displays that message if the connection isn't secure: You are currently accessing CAS over a non-secure connection. Single Sign on WILL NOT WORK. In order to have single sign on work, you

[cas-user] Under what conditions does CAS respond with a 302 redirect?

2011-09-30 Thread Kirk, Matt
Hi Scott/ / Marvin / All, Do you know under what conditions CAS will respond with a 302 redirect to the /login URL? Also how does it construct the header Location URL to redirect to? i.e. in the cas.properties file you have the following config server.prefix=http://localhost:8080/cas cas.sec

[cas-user] CAS 3.4.10 http / https redirect error

2011-09-29 Thread Kirk, Matt
Scott / Marvin, Thanks for the help earlier, got another one... Getting an unexplainable intermittent scenario whilst trying to make our CAS app production ready. We have the following architecture: 4 Tomcat servers with CAS 3.4.10 (plus our custom JSPs) deployed behind a load balancer. Auth

RE: [cas-user] Upgrade CAS 3.4.8 to 3.4.10

2011-09-29 Thread Kirk, Matt
Thanks Scott / Marvin, fixed our custom login JSP and it's working now. Regards, Matt From: Marvin Addison [marvin.addi...@gmail.com] Sent: 29 September 2011 14:16 To: cas-user@lists.jasig.org Subject: Re: [cas-user] Upgrade CAS 3.4.8 to 3.4.10 > If you h

[cas-user] Upgrade CAS 3.4.8 to 3.4.10

2011-09-29 Thread Kirk, Matt
Hi All, I'm using the Maven WAR Overlay method in my CAS project and today tried upgrading from 3.4.8 to 3.4.10 but the deployed app failed to authenticate (using Ldap Fast Bind) after the upgrade. There were no errors in the cas.log that gave me any indication as to why and all I saw in the b

[cas-user] EhcacheTicketRegistry for CAS 3.4.7

2011-08-17 Thread Kirk, Matt
Hi All / Scott, I've implemented a CAS Cluster using CAS 3.4.7 and Ehcache 2.2.0 as described in https://wiki.jasig.org/display/CASUM/EhcacheTicketRegistry with the EhcacheTicketRegistry.java found at https://wiki.jasig.org/download/attachments/40927328/EhcacheTicketRegistry.java The EhcacheTi

RE: [cas-user] CAS in load balanced environment

2011-08-17 Thread Kirk, Matt
IS and increased cost. I am curious why you are choosing the EHCache ticket registry over DefaultTicketRegistry. Am I missing something? -john From: Kirk, Matt [mailto:matt.k...@bskyb.com] Sent: Tuesday, August 16, 2011 10:05 AM To: cas-user@lists.jasig.org Subject: RE: [cas-user] CAS in load

RE: [cas-user] CAS in load balanced environment

2011-08-16 Thread Kirk, Matt
Thanks for all the feedback. We're opting for the distributed Ehcache ticket registry over a database persistent registry across a CAS Cluster as we feel that if a node goes down, then the ticket replication will allow seamless access to services and therefore the DB is not required (and would

RE: [cas-user] CAS in load balanced environment

2011-08-16 Thread Kirk, Matt
there is continued dev. Repcache's website shows the last version update in 2009. From a simplicity standpoint, there is no code changes required in CAS which is good for us as we don't have a lot of Java experience. -John -----Original Message- From: Kirk, Matt [mailto:matt

RE: [cas-user] CAS in load balanced environment

2011-08-16 Thread Kirk, Matt
Hi, I'm currently looking at implementing a HA CAS Cluster and I was looking at using Ehcache. Having just read your post, what is the Memcache solution and do you have a setup guide? Is one solution favourable over another? Thanks, Matt From: Marvin