grails - Spring Secuirty CAS SLO not working -


we use jasig cas-server authentication. single-sign-on works fine single-logout not working how expected it.

this steps do:

so if log out on http://foo.bar works , if call again need login, http://baar.bar i'm still logged in.

here application config:

        // define authentication providers     grails.plugin.springsecurity.providernames = ["casauthenticationprovider"]     // define cas configuration     grails.plugin.springsecurity.cas.loginuri = "/login"     grails.plugin.springsecurity.cas.serviceurl = "http://cas.bar/${appname}/j_spring_cas_security_check"     grails.plugin.springsecurity.cas.serverurlprefix ="https://cas.bar/cas"     grails.plugin.springsecurity.logout.afterlogouturl =   "https://cas.bar/cas/logout?url=http://localhost:8080/${appname}"     grails.plugin.springsecurity.cas.userdetailsservice = "casuserdetailsservice"     grails.plugin.springsecurity.sesessionfixationprevention = false 

why i'm still logged in on http://baar.bar?

edit:

the cas server sending logout message applications, in log file prints this:

debug [org.jasig.cas.util.simplehttpclient] - <finished sending message https://baar.bar/j_spring_cas_security_check> 

on other end see incomming request in log files apache2:

 "post /j_spring_cas_security_check http/1.1" 200 5655 "-" "java/1.8.0_131" 


Comments

Popular posts from this blog

Fail to load namespace Spring Security http://www.springframework.org/security/tags -

sql - MySQL query optimization using coalesce -

unity3d - Unity local avoidance in user created world -