CAS in IdP v3

[Marvin Addison]

On Tue, Feb 2, 2016 at 4:11 PM Brian Biggs <brian.biggs at sonoma.edu> wrote:

> Most of our internal CAS clients do not use sessions and (I think) rely on
> the Ticket Granting Ticket (with an expire time of 30 minutes) to keep
> issuing new Service Tickets each time they are hit.
>

That is unusual but it ought to work. If you're getting prompted for
credentials each time you reach the IdP, then there's something wrong with
your IdP session. Since you appear to be operating in something like
stateless mode, I wonder if you have session cookies disabled in your
browser. That could cause what you're seeing.

I'm really attempting to upgrade our setup from CAS v3.4.10 + Shib v2.2.1
> to just Shib 3.2.1.
>

Understood. I'll try to review the full log dump you sent me for further
clues.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160202/a9b7fb66/attachment.html>