When you invoke /cas/logout, do you see the SSO session destroyed in the 
logs and ticket deleted? If you do, the problem is elsewhere.



From: [email protected] [mailto:[email protected]] On Behalf Of Gavin 
Donald
Sent: Monday, April 18, 2016 9:32 AM
To: CAS Community <[email protected]>
Subject: [cas-user] Basic Authentication preventing CAS logout.



Hello,

I am setting up a test environment for a web site that uses CAS to 
authenticate with the usernames and passwords stored in MySQL. As this is a 
testing enviroment that is not on a local-intranet I would like to protect 
the whole of the web site using Basic Authentication. To do this I have 
Apache fronting Tomcat and in the Apache VHost I have:

 <Location />
            SetEnvIf Request_URI "^/cas.*$" allow=yes
            AuthType Digest
            AuthName "RestrictedArea"
            AuthDigestProvider file
            AuthUserFile /storage/www/tc/.htdigest
            Options +FollowSymLinks
            Order Deny,Allow
            Satisfy any
            Deny from All
            Require valid-user
            Allow from env=allow
 </Location>

Basic Authentication works as expected and I can use CAS to log into the web 
site via the web sites form based authentication. The problem comes when I 
try to log out of the web site using CAS. I visit the logout page and then 
go back to the web sites home page but I am still shown as being logged into 
CAS. If I turn off Basic Authentication this does not happen. It seems that 
Basic Authentication is interfering with the normal CAS logout process. Does 
anyone have any idea why?

-- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to [email protected] 
<mailto:[email protected]> .
To post to this group, send email to [email protected] 
<mailto:[email protected]> .
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1ff560e9-b72d-4c56-8b2e-b603f30e42d8%40apereo.org
 
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/1ff560e9-b72d-4c56-8b2e-b603f30e42d8%40apereo.org?utm_medium=email&utm_source=footer>
 
.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/cf785881.00002780.00000014%40MMOAYYED.unicon.net.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to