Recently while I was working with CAS server,got a conceptual problem… As I understood as soon as a ticket validation succeeds, that ticket get erased… But why ? And where exactly the user role is checked at ?
Thanx
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
By default the ServiceTicket(ST) can be used only once and for a short time only(Its bound to a
MultiTimeUseOrTimeoutExpirationPolicy). This is like Mike said ins his answer to ensure that it is not misused. This pre-settings can be changed if you really need to as I wrote already on another post by changing theticketExpirationPolicy.xmlfileHowever the TicketGrantingTicket(TGT) remains active and is by default only bound to a
TimeoutExpirationPolicyand not limited by the amount of request. From the TGT the CAS can create as many STs as you need.