CAS + server-side storage of IdP sessions

[Karla Borecky]

Well, we told the librarians that we had to think long and hard about doing
this. We're in the middle of getting shib working with all these twisted
and baroque Banner SSO modules, among other things, and we're not really
into changing the architecture of the system (so to speak) just because
they blew off our saying "No more LDAP" when they first proposed using this
service.

When it comes down to it, I have faith that it all works swimmingly, but we
have so many high-profile SSO things going on now that we daren't make any
big changes - especially when the folks we're working with think we're
performing voodoo inside a black box anyway, and suspect same as being the
probable cause of any and all problems.

But I'm sure no one else has experienced this. Ha! :-D

Karla

On Wed, Jul 6, 2016 at 3:21 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > But I don't think I knew that this replaced the client-side session
> storage.
> > Does it eliminate the client session cookies on the client?
>
> Some of the cookies, not all of them.
>
> > Also: if I'm reading correctly: for the simple version of this
> deployment, you
> > use the server memory to store all this session info (though you could
> set up
> > an actual storage service). I'm wondering how much potential memory we're
> > talking here. Is there a tool that shows you how many sessions are out
> > there? Or does anyone have any experience with this?
>
> We have no tools for that at the moment, and I don't use it, so I have no
> idea.
>
> > If you use disk storage for the sessions, does that affect the response
> time?
>
> If you mean a database, certainly, probably more because of network
> overhead. There isn't any other disk mechanism.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Karla Borecky
Systems Administrator
ITS
Smith College
Northampton, MA 01063
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160707/ba030dca/attachment.html>