Re: [Trac] TracCasPlugin performs unwanted logout (or single sign out)

2010-03-09 Thread Giuseppe Sollazzo
Eirik Schwenke wrote: end-of-day-off-topic-rant The above (varying levels of IT competence) is *exactly* why Single Sign On without Single Sign Out is always going to be a huge security issue. I think the general reason for requiring Single Sign Out via a global portal is that most

Re: [Trac] TracCasPlugin performs unwanted logout (or single sign out)

2010-03-09 Thread Eirik Schwenke
Giuseppe Sollazzo skrev 09. mars 2010 10:43: Eirik Schwenke wrote: (...) I guess the reason why you'd want this is because you've given up on single sign on, and use CAS simply as a way to synchronize login names and passwords across several servers. I guess this is fine -- it's just a bit

Re: [Trac] TracCasPlugin performs unwanted logout (or single sign out)

2010-03-08 Thread Giuseppe Sollazzo
Hi Noah, well... theoretically you are at least partially right. But that's not the case when discussing a real implementation and I can explain why. The point with CAS is that it offers an *optional* single sign out procedure. Most applications/implementations won't log out the full CAS

Re: [Trac] TracCasPlugin performs unwanted logout (or single sign out)

2010-03-08 Thread Eirik Schwenke
Giuseppe Sollazzo skrev 08. mars 2010 09:54: Hi Noah, well... theoretically you are at least partially right. But that's not the case when discussing a real implementation and I can explain why. The point with CAS is that it offers an *optional* single sign out procedure. Most

RE: [Trac] TracCasPlugin performs unwanted logout (or single sign out)

2010-03-08 Thread Noah Kantrowitz
-Original Message- From: trac-users@googlegroups.com [mailto:trac-us...@googlegroups.com] On Behalf Of Eirik Schwenke Sent: Monday, March 08, 2010 10:07 AM To: trac-users@googlegroups.com Subject: Re: [Trac] TracCasPlugin performs unwanted logout (or single sign out) Giuseppe