Hello,
I am setting up a test environment for a web site that uses CAS to
authenticate with the usernames and passwords stored in MySQL. As this is a
testing enviroment that is not on a local-intranet I would like to protect
the whole of the web site using Basic Authentication. To do this I have
Apache fronting Tomcat and in the Apache VHost I have:
<Location />
SetEnvIf Request_URI "^/cas.*$" allow=yes
AuthType Digest
AuthName "RestrictedArea"
AuthDigestProvider file
AuthUserFile /storage/www/tc/.htdigest
Options +FollowSymLinks
Order Deny,Allow
Satisfy any
Deny from All
Require valid-user
Allow from env=allow
</Location>
Basic Authentication works as expected and I can use CAS to log into the
web site via the web sites form based authentication. The problem comes
when I try to log out of the web site using CAS. I visit the logout page
and then go back to the web sites home page but I am still shown as being
logged into CAS. If I turn off Basic Authentication this does not happen.
It seems that Basic Authentication is interfering with the normal CAS
logout process. Does anyone have any idea why?
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1ff560e9-b72d-4c56-8b2e-b603f30e42d8%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.
