I assume your log in attempts are within seconds of each other and that you have only a single cas server.
Check your service definition to see if it requires a new authentication. Check what your service is sending to cas, it may be asking for new authentication (use browser developer tools). Check your TGT and TGC expiration policies to be sure they are still valid for subsequent logins. By default ST can only be used once. There are logs saying what ST is being processed. Ray On Wed, 2022-05-11 at 17:38 +0200, spfma.t...@e.mail.fr wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Hi, I am experiencing something strange on a 6.4.5 instance : when I try to access a service (starting from scratch with a closed browser) I get the login form and the I am granted the right to reach it. In the logfiles, I can clearly see I get TGT after authentication, then a ST for the service. But if I open a second tab on my browser and try to reach the service again, the login form appears again. If I don't reauth, my SSO session is like invalid, I am asked to re-auth all the time, even when I try to reach another service. But with other services, I can start my SSO session, access a firtst service, a second one and the same problem occurs with the third one. Or with the second one, it depends on the services. Of course, none of these services is performing a logout neither I do click on such a link. I'm not able to explain what's happening, so I hope someone here has a clue. I see lines like this one : DEBUG [org.apereo.cas.ticket.expiration.MultiTimeUseOrTimeoutExpirationPolicy] - <Ticket usage count [1] is greater than or equal to [1]. Ticket [xxxxxxxxxxxxx] has expired> Is there a link ? Regards ________________________________ FreeMail powered by mail.fr<https://mail.fr> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org<mailto:cas-user+unsubscr...@apereo.org>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/20220511153848.D49ACC0056%40smtp04.mail.de<https://groups.google.com/a/apereo.org/d/msgid/cas-user/20220511153848.D49ACC0056%40smtp04.mail.de?utm_medium=email&utm_source=footer>. -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | r...@uvic.ca<mailto:r...@uvic.ca> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d531db1179d1ce94fc9bc5d9e3c0198818c4d5e6.camel%40uvic.ca.
