cas.authn.pm.reset.expirationMinutes=60 but expires in 5 minutes

132 views
Skip to first unread message

Jack Bakker

unread,
Jan 30, 2020, 9:42:30 AM1/30/20
to CAS Community
In v6.1.1, I have in cas.properties cas.authn.pm.reset.expirationMinutes=60 but the TST* ticket expires in 5 minutes.
Logs in DEBUG level does show "Link is only active for the next [60] minute(s)" on generating the password reset URL.
Is there another relevant config setting I should become aware of ?

Jack Bakker

unread,
Feb 4, 2020, 9:40:10 AM2/4/20
to CAS Community
cas.ticket.tst.timeToKillInSeconds=3600

Ray Bon

unread,
Feb 4, 2020, 12:10:37 PM2/4/20
to cas-...@apereo.org
Jack,

I looked through the CAS code for 6.1.x and found nothing obvious that would limit it to 5m.
Perhaps it is the expiration of the TGT. How long it the timeout for the TGT?

Ray
--
Ray Bon
Programmer Analyst
Development Services, University Systems

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.

Jack Bakker

unread,
Feb 4, 2020, 12:12:56 PM2/4/20
to CAS Community
Thanks Ray,

I solved the issue by setting the following property:
cas.ticket.tst.timeToKillInSeconds=3600

Password reset tickets show as TST tickets.

artur miś

unread,
Sep 17, 2021, 5:47:02 AM9/17/21
to CAS Community, Jack Bakker
what is default value of cas.ticket.tst.timeToKillInSeconds  ?

Ray Bon

unread,
Sep 17, 2021, 12:05:56 PM9/17/21
to cas-...@apereo.org
Artur,



Ray

On Fri, 2021-09-17 at 02:47 -0700, artur miś wrote:
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.
I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day.
Reply all
Reply to author
Forward
0 new messages