alf_ticket

smcardle — Tue, 31 May 2011 02:26:48 GMT

Hi allCan anybody explain why my alf_ticket(s) don't seem to expire!!!If I get a ticket from the login web service I am still able to use that ticket several days after.Is it possible to have tickets automatically expire after some time period, similar to the way sessions would expire after a determ

Re: alf_ticket

jpotts — Wed, 15 Feb 2012 23:08:30 GMT

This has always been the case. Tickets hang around for an indeterminate period of time.

Jeff

Re: alf_ticket

smcardle — Tue, 10 Apr 2012 23:54:42 GMT

Thanks Jeff.

Sorry it's been some time since I looked at this but I'm ust looking into integration with OpenAM as an SSO solution and authentication is on my radar again.

I'm not sure that your response "it's always been like that" is a sufficient answer.

If tickets never expire then how do they get cleaned up in the database ? or have I finally found the reason why our Alfresco prod database is now 17Gig in size?

I would expect this behavior from something like OAuth tokens, but in this case I would save these for later and only attempt to generate new ones if I get an authentication error using an existing one.

For Alfresco tokens, the context is more closely related to say SSO tokens and often have life cycles similar too or controlled by sessions, in fact that's the basis of our current use of Alfresco tokens - whether this is correct or not is open to debate.

So, given that they don't expire…. what would be your suggestion for a usage pattern? i.e. how can I ensure I do not continually create new tokens.

Regards

Steve

topic Re: alf_ticket in Alfresco Archive

alf_ticket

Re: alf_ticket

Re: alf_ticket