Hello folks,

I was wondering why single sign out does not seem to work with my CAS 3.4.8... In fact, it works !

But if I hit CAS logout page with my smart-card inserted (so my personal X509 certificate is brought to CAS server), I get in my audit log:

First login to application :

WHO: <DN of my certificate>
WHAT: supplied credentials: <DN of my certificate>
ACTION: AUTHENTICATION_SUCCESS

WHO: <DN of my certificate>
WHAT: TGT-4-cGhcNvYZmjZCKIQRrvo4Pe0KlP7wu3lc7Pj5emDjLiKQXbYXsJ-dev.mydomain
ACTION: TICKET_GRANTING_TICKET_CREATED

WHO: <My CAS principal>
WHAT: ST-3-UUKCUxfvXJMDfzqWUUEm-dev.mydomain for http://dev.mydomain/philippe/eclipse/testcas/www/
ACTION: SERVICE_TICKET_CREATED

=> Fine

WHO: audit:unknown
WHAT: ST-3-UUKCUxfvXJMDfzqWUUEm-dev.mydomain
ACTION: SERVICE_TICKET_VALIDATED

=> My test application successfully validate my service ticket. Perfect.

I'm now hitting logout page...

WHO: audit:unknown
WHAT: TGT-4-cGhcNvYZmjZCKIQRrvo4Pe0KlP7wu3lc7Pj5emDjLiKQXbYXsJ-dev.mydomain
ACTION: TICKET_GRANTING_TICKET_DESTROYED

=> Perfect

WHO: <DN of my certificate>
WHAT: supplied credentials: <DN of my certificate>
ACTION: AUTHENTICATION_SUCCESS

WHO: <DN of my certificate>
WHAT: TGT-5-bjIrzp2Vo1ECysI3uJqLaZmzyvlElfIN7s6tsdIZAZdYn4aQNa-dev.mydomain
ACTION: TICKET_GRANTING_TICKET_CREATED

=> Hum, this is not that I intended to do !

Any Idea ?

Rgds.

--
Philippe MARASSE

Service Informatique - Centre Hospitalier Henri Laborit
BP 587 - 370 avenue Jacques Coeur
86021 Poitiers Cedex
Tel : 05.49.44.57.19


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to