-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There is no way to logout from a mod_auth_cas protected site today
(analogous, say, to HTTP Basic Auth).  Single Log Out is on the roadmap,
but does not yet exist.

In theory, though, you could write a CGI to delete the m-a-c cookie.

HTH,
- -Matt

Burak OGUZ wrote:
> Hi everybody,
> 
> I have logout problem with mod_auth_cas. When I call /cas/logout, it does not 
> signs out from the site and it keeps session and cookie. But after i restart 
> my browser cookie and session dies and my site asks for authorization from 
> /cas/login. 
> 
> Is it normal or are there any way to logout from sites which are protected by 
> mod_auth_cas? As far as I know mod_auth_cas does not support single sign off. 
> My main intention is to use Apache as a reverse proxy and make authentication 
> for internal web servers over CAS Server.
> 
> My apache configuration about mod_auth_cas is below.
> 
> Any help will be greatly appreciated.. Thanks in advance.
> 
> httpd.conf : 
> 
> LoadModule auth_cas_module /usr/lib/apache2/mod_auth_cas.so
> CASCookiePath /tmp/cas/
> CASloginURL https://localhost/cas/login
> CASValidateURL https://localhost/cas/serviceValidate
> CASCertificatePath /etc/httpd/conf/exported-pem.crt
> <Directory "/xyz/">
> AuthType CAS
> Require valid-user
> </Directory">
> 
>  
> -- burak()
> (ps: bf)
> METU CENG '06
> 
> 
> 
>       
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas


- --
Matthew J. Smith
University of Connecticut ITS
[EMAIL PROTECTED]
PGP KeyID: 0xE9C5244E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI0pgBGP63pOnFJE4RAhExAJ44MWh3YZ8MHbfb+uqWyrUM0GaizQCfTzBj
4WmxyVU/quh31RNmFwmqVjw=
=A4S1
-----END PGP SIGNATURE-----
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to