The cas-client-core code that the getNonSeraphAttributeKeys error is
possibly referring to might be this step in the logout() method of
class ConfluenceCasAuthenticator:
session.setAttribute(LOGGED_OUT_KEY, principal);
session.setAttribute(AbstractCasFilter.CONST_CAS_ASSERTION, null);
Immediately after the logout() method is executed, a
ConfluenceCasAuthenticator::getUser request is made. getUser checks the
session object to see if it still has an assertion (which is supposed to be
null)—and it apparently never got destroyed in logout()—which means it
"re-ups" the log-in session, undoing the actions of the logout() method.
*daniel spillers*
University of Arkansas at Little Rock <http://ualr.edu/> | Information
Technology Services
+1.501.916.3010 | ualr.edu/itservices
On Wed, Aug 28, 2013 at 10:50 AM, Daniel Spillers <[email protected]>wrote:
> I have CAS 3.5 working with my Confluence installation after installing
> and
> configuring<https://wiki.jasig.org/display/CASC/Configuring+Confluence+with+JASIG+CAS+Client+for+Java+3.1>the
> Jasig CAS client for Java 3.1 (cas-client-core and
> cas-client-integration-atlassian) libraries. Only one thing is strange: I
> can't log out of Confluence.
>
> I'm not trying to implement single sign-out, just trying to kill the local
> auth session inside Confluence.
>
> When I click the Confluence Log out link, it takes me to
> /login.action?logout=true (screenshot attached). The session does not seem
> to get invalidated, as I am taken to a page that still knows me.
>
> I've attached a log file of a logout attempt. Of some interest is the line:
>
> getNonSeraphAttributeKeys Not removing seraph value from session on
> logout: seraph_defaultauthenticator_logged_out_user value:
> com.atlassian.confluence.user.ConfluenceUserImpl
>
> @Scott Battaglia, any thoughts? I'll be raising this issue with Atlassian
> support, however they may be unwilling to troubleshoot a third-party
> library.
>
>
> *daniel spillers*
> University of Arkansas at Little Rock <http://ualr.edu/> | Information
> Technology Services
> +1.501.916.3010 | ualr.edu/itservices
>
>
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
