Reset TGT Timeout from client

Scott Battaglia scott.battaglia at gmail.com
Tue Jun 24 11:08:03 EDT 2008


Its pretty much impossible to do (by design) unless you give the TGT a
public identifier such that you could reference it or you expose its
identifier to the client applications (very bad).  The actual TGT identifier
is a "secret" meaning its stored securely in the browser and only passed to
the CAS application over SSL.  Other than that we don't have a mechanism in
place (again, by design) to reference the TGT.

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Tue, Jun 24, 2008 at 10:28 AM, Troy Bull <troy.bull at gmail.com> wrote:

> Greetings
>
> Is there a way I can reset the TGT timeout from a client?  Maybe
> something I can put in a filter or in the configuration of the client
> that will basically "ping" the cas server resetting the timeout on the
> TGT?
>
> If there is nothing that will do this "out of the box" what is the
> best way to accomplish this with minimal coding?  I was thinking I
> could do an http get from a filter on the app?  What would I have to
> get? and what would I have to include in my get so that CAS will know
> which TGT to update the timeout for?
>
> Thanks
> Troy
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080624/a77bbf53/attachment.html 


More information about the cas mailing list