Re: [cas-user] TGT and single-sign-out

2013-08-09 Thread Scott Battaglia
Just to clarify, I believe you will only get a null returned from the TicketRegistry if the ticket had been explicitly deleted or evicted from the underlying cache. Being considered "expired" by CAS is completely different than any cache expiration: https://github.com/Jasig/cas/blob/master/cas-se

Re: [cas-user] TGT and single-sign-out

2013-08-08 Thread Jérôme LELEU
Hi, I assume you talk about CAS 3.5.2. The logout : https://github.com/Jasig/cas/blob/3.5.x/cas-server-core/src/main/java/org/jasig/cas/web/LogoutController.java#L82 will call https://github.com/Jasig/cas/blob/3.5.x/cas-server-core/src/main/java/org/jasig/cas/CentralAuthenticationServiceImpl.java#

[cas-user] TGT and single-sign-out

2013-08-08 Thread Tom Freestone
We are using a ehcache backed ticket registry. We have implemented single-sign-out on our cas server. I was curious how the single-signout is tracked in the ticket registry? If you configure ehcache for 100,000 TGT's and only 60,000 are active (e.g. not evicted from ehcache), you will see the ot