RE: [cas-user] Single Sign Out - and load balancer

2012-12-17 Thread Ohsie, David
>> It seems like the answer to your Single Sign Out issue in a load balanced >> environment is fairly simple. >> Use a shared session mechanism instead of using sticky sessions for your >> load balanced servers. > This is incorrect. Since the request is sourced differently from the CAS > serve

Re: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread Marvin Addison
> As per your remark - please note https://issues.jasig.org/browse/CAS-742 > *could*help with sign out behind a load-balancer, provided CAS can access > internal node addresses (not through the load-balancer). Apologies, I didn't read carefully. > It boils down to allowing business application

Re: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread sol myr
l Message - From: "Domazlicky, Eric" To: cas-user@lists.jasig.org Cc: Sent: Monday, December 10, 2012 6:10 PM Subject: RE: [cas-user] Single Sign Out - and load balancer It seems like the answer to your Single Sign Out issue in a load balanced environment is fairly simple. Use a share

Re: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread sol myr
Message - From: Marvin Addison To: cas-user@lists.jasig.org Cc: Sent: Monday, December 10, 2012 4:26 PM Subject: Re: [cas-user] Single Sign Out - and load balancer > But please note solutions were already outlined: > https://issues.jasig.org/browse/CAS-742 That issue in no

Re: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread Marvin Addison
> It seems like the answer to your Single Sign Out issue in a load balanced > environment is fairly simple. Use a shared session mechanism instead of using > sticky sessions for your load balanced servers. This is incorrect. Since the request is sourced differently from the CAS server, it natura

RE: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread Domazlicky, Eric
g Subject: [cas-user] Single Sign Out - and load balancer Hi, We have a single CAS server, but our *business* applications is clustered & behind a Load Balancer (HAProxy). We were disappointed to learn that single sign *out* fails on such architecture, because when CAS sends the "log

Re: [cas-user] Single Sign Out - and load balancer

2012-12-10 Thread Marvin Addison
> But please note solutions were already outlined: > https://issues.jasig.org/browse/CAS-742 That issue in no way addresses single sign-out matters when the client is clustered/load balanced. > http://comments.gmane.org/gmane.comp.java.jasig.cas.devel/1495 That is a good reference. The patch I o

Re: [cas-user] Single Sign Out - and load balancer

2012-12-09 Thread sol myr
e Accounts). Thanks again. - Original Message ----- From: Marvin Addison To: cas-user@lists.jasig.org Cc: Sent: Sunday, December 9, 2012 3:41 PM Subject: Re: [cas-user] Single Sign Out - and load balancer > Would anyone please happen to know of patched to the CAS code - either > op

Re: [cas-user] Single Sign Out - and load balancer

2012-12-09 Thread Marvin Addison
> Would anyone please happen to know of patched to the CAS code - either > open-source or commercial - that solve this (e.g. implementing the CAS-742 > suggestion, to distinguish between "redirect" address and "logout > notification" address)? I developed a patch for this over a year ago, but a

[cas-user] Single Sign Out - and load balancer

2012-12-09 Thread sol myr
Hi, We have a single CAS server, but our *business* applications is clustered & behind a Load Balancer (HAProxy). We were disappointed to learn that single sign *out* fails on such architecture, because when CAS sends the "logout" notification to the application, the notification goes to the Lo