{"action":"opened","issue":{"url":"https://api.github.com/repos/apereo/cas/issues/2528","repository_url":"https://api.github.com/repos/apereo/cas","labels_url":"https://api.github.com/repos/apereo/cas/issues/2528/labels{/name}","comments_url":"https://api.github.com/repos/apereo/cas/issues/2528/comments","events_url":"https://api.github.com/repos/apereo/cas/issues/2528/events","html_url":"https://github.com/apereo/cas/issues/2528","id":221863478,"number":2528,"title":"Hazelcast ticket not deleted when encryption is enabled","user":{"login":"ravomavain","id":286023,"avatar_url":"https://avatars1.githubusercontent.com/u/286023?v=3","gravatar_id":"","url":"https://api.github.com/users/ravomavain","html_url":"https://github.com/ravomavain","followers_url":"https://api.github.com/users/ravomavain/followers","following_url":"https://api.github.com/users/ravomavain/following{/other_user}","gists_url":"https://api.github.com/users/ravomavain/gists{/gist_id}","starred_url":"https://api.github.com/users/ravomavain/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ravomavain/subscriptions","organizations_url":"https://api.github.com/users/ravomavain/orgs","repos_url":"https://api.github.com/users/ravomavain/repos","events_url":"https://api.github.com/users/ravomavain/events{/privacy}","received_events_url":"https://api.github.com/users/ravomavain/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-04-14T18:26:49Z","updated_at":"2017-04-14T18:26:49Z","closed_at":null,"body":"When encryption is enabled for Hazelcast ticket registry, tickets are never deleted and user are not able to login again after the expiration of their TGT.\r\n\r\nPull request will follow.\r\n\r\n- CAS server version: 5.0.x and master\r\n- Container/environment type/version (Tomcat, Jetty, Java, Linux/Windows, etc): Tomcat/Linux\r\n- Steps to duplicate the problem along with your CAS settings and properties:\r\n1. Enable cas-server-support-hazelcast-ticket-registry and configure it with encryption (5.0.x settings):\r\n```\r\ncas.ticket.registry.hazelcast.mapName=tickets\r\ncas.ticket.registry.hazelcast.cluster.members=node1,node2\r\ncas.ticket.registry.hazelcast.instanceName=${cas.host.name}\r\ncas.ticket.registry.hazelcast.crypto.alg=AES\r\ncas.ticket.registry.hazelcast.crypto.signing.keySize=512\r\ncas.ticket.registry.hazelcast.crypto.signing.key=--key--\r\ncas.ticket.registry.hazelcast.crypto.encryption.keySize=16\r\ncas.ticket.registry.hazelcast.crypto.encryption.key=--key--\r\n```\r\n2. Log into your cas instance\r\n3. Wait until ticket expiration (you can decrease cas.ticket.tgt.timeToKillInSeconds)\r\n4. Try to log in again: you don't get any error message (or anything in the logs) but you are redirected to the login page with a 403."}}
{"actor":{"display_login":"ravomavain"}}