cas protocol behind an F5

[Marvin Addison]

On Thu, Sep 1, 2016 at 8:52 PM Niva Agmon <nagmon at temple.edu> wrote:

> Does anyone have a similar setup that is working for them with CAS
> protocol and memcached behind an F5?
>
Yes, we have the same system architecture and it works fine. My best guess
is that some of your memcached nodes aren't reachable by your IdP hosts.
You can easily verify by attempting to hit all your memcached hosts from
each of your IdP hosts. Here's a gist with a script and command you can use
as basis for investigation:

https://gist.github.com/serac/7bba39e70a983b2b2d21245072b0bd05

You probably shouldn't test by trying to fetch a service ticket by ID
because they're so short-lived, but you can do a basic smoke test on
connectivity which is really the point.

Hope that helps,
M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160902/8914fe06/attachment.html>