dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Documentation for casTicketExpiration (#2654)

Browse Source
This commit is contained in:
Maxime Besson 2021-11-10 09:46:17 +01:00
parent e1896e07ab
commit 4bf7245605
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/sources/admin/idpcas.rst
View File

@ -71,6 +71,10 @@ Then go in ``CAS Service`` to define:
matching. By default, LemonLDAP::NG will try to find a declared CAS
Application matching the hostname of the requested application if it cannot
find a match using the full path. See :ref:`idpcas-url-matching` for details
- **Temporary ticket lifetime**: (since *2.0.14*): restricts how long Service
and Proxy tickets are valid after being generated. For compatibility, the
default value of ``0`` means they are valid for the entire session duration.
But the CAS spefications recommends ``300`` (5 minutes).
.. tip::

1
doc/sources/admin/parameterlist.rst
View File

@ -62,6 +62,7 @@ casSrvMetaDataOptions Root of CAS server optio
casStorage Apache::Session module to store CAS user data ✔
casStorageOptions Apache::Session module parameters ✔
casStrictMatching Disable host-based matching of CAS services ✔
casTicketExpiration CAS Service and Proxy tickets TTL ✔
cda Enable Cross Domain Authentication ✔ ✔
certificateResetByMailCeaAttribute ✔
certificateResetByMailCertificateAttribute ✔