How do I turn off single sign out in CAS3.2+

[Michael Johnston]

correct, no new code needed to disable singlesignout, but implementing  
a default serviceurl ended up having to overlay a few classes to make  
things public, and that is why i found this.

I understand why it is on the arg extractors to a certain extent,  
because that makes it easy to separately enable/disable signout for  
various request types (saml, cas). But the fact that the coupling  
between CasArgumentExtractor & SimpleWebApplicationServiceImpl &  
single sign out is completely hidden from the controllers/flow-actions  
makes decorating service management tricky.


Cheerio,

Michael Johnston
lastobelus at mac.com




On 14-Jan-09, at 7:33 PM, Dale Ogilvie wrote:

> You need the following in WEB-INF/spring-configuration/ 
> argumentExtractorsConfiguration.xml
>
>   <bean id="casArgumentExtractor" class="org.jasig.cas.web.support.CasArgumentExtractor 
> ">
>         <property name="disableSingleSignOut">
>             <value>true</value>
>         </property>
>     </bean>
>
> No new code required. Spring does the necessary.
>
> From: cas-bounces at tp.its.yale.edu [mailto:cas- 
> bounces at tp.its.yale.edu] On Behalf Of Scott Battaglia
> Sent: Thursday, 15 January 2009 4:11 p.m.
> To: Yale CAS mailing list
> Subject: Re: How do I turn off single sign out in CAS3.2+
>
> You can control whether single sign out is enabled or not either by  
> using that parameter on the argument extractor, or based on whether  
> you provide an HttpClient or not (if you don't provide one then it  
> can't make HTTP calls, i.e. logout ;-)).
>
> -Scott
>
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>
>
> On Wed, Jan 14, 2009 at 9:49 PM, Michael Johnston  
> <lastobelus at mac.com> wrote:
>>  (And also the fact that "cleanupUrl", which is necessary for  
>> services to be comparable & recognizable, is protected, but for  
>> that we can make a subclass of SimpleWebApplicationServiceImpl,  
>> which I suppose doesn't count as modifying CAS code)
>
> Well, actually not it is final.
>
> Cheerio,
>
> Michael Johnston
> lastobelus at mac.com
>
>
>
>>
>>
>>
>>
>> On 31-Jul-08, at 5:36 PM, Scott Battaglia wrote:
>>
>>> You should be able to set it on the CasArgumentExtractor.  Set the  
>>> "disableSingleSignOut" property to true.
>>>
>>> -Scott Battaglia
>>> PGP Public Key Id: 0x383733AA
>>> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>>>
>>>
>>> On Thu, Jul 31, 2008 at 6:50 PM, dale77  
>>> <Dale.Ogilvie at trimble.co.nz> wrote:
>>>
>>> Can some kind soul please help me out with the configuration to  
>>> prevent CAS
>>> posting single sign out xml back to services?
>>>
>>> Our CAS server lives in a DMZ that has no DNS access, so when the  
>>> TGT is
>>> destroyed the system hangs as CAS tries to post back to hosts it  
>>> cannot
>>> resolve... I believe that single sign out is turned on by default,  
>>> hence the
>>> need to switch it off in our system.
>>>
>>> I expect it will be simply a bean modification in  
>>> deployerConfigContext.xml.
>>> Does anyone know the necessary spring incantation?
>>>
>>> Thanks!
>>>
>>> Dale
>>> --
>>> View this message in context: http://www.nabble.com/How-do-I-turn-off-single-sign-out-in-CAS3.2%2B-tp18765177p18765177.html
>>> Sent from the CAS Users mailing list archive at Nabble.com.
>>>
>>> _______________________________________________
>>> Yale CAS mailing list
>>> cas at tp.its.yale.edu
>>> http://tp.its.yale.edu/mailman/listinfo/cas
>>>
>>> _______________________________________________
>>> Yale CAS mailing list
>>> cas at tp.its.yale.edu
>>> http://tp.its.yale.edu/mailman/listinfo/cas
>>
>> _______________________________________________
>> Yale CAS mailing list
>> cas at tp.its.yale.edu
>> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20090114/7b6b55db/attachment.html