grails - Spring Secuirty CAS SLO not working -
we use jasig cas-server authentication. single-sign-on works fine single-logout not working how expected it.
this steps do:
- goto http://foo.bar
- login on http://cas.bar
- go http://baaar.bar
- logout on foo.baar via cas.bar
- go http://baar.bar
- still logged in
so if log out on http://foo.bar
works , if call again need login, http://baar.bar
i'm still logged in.
here application config:
// define authentication providers grails.plugin.springsecurity.providernames = ["casauthenticationprovider"] // define cas configuration grails.plugin.springsecurity.cas.loginuri = "/login" grails.plugin.springsecurity.cas.serviceurl = "http://cas.bar/${appname}/j_spring_cas_security_check" grails.plugin.springsecurity.cas.serverurlprefix ="https://cas.bar/cas" grails.plugin.springsecurity.logout.afterlogouturl = "https://cas.bar/cas/logout?url=http://localhost:8080/${appname}" grails.plugin.springsecurity.cas.userdetailsservice = "casuserdetailsservice" grails.plugin.springsecurity.sesessionfixationprevention = false
why i'm still logged in on http://baar.bar
?
edit:
the cas server sending logout message applications, in log file prints this:
debug [org.jasig.cas.util.simplehttpclient] - <finished sending message https://baar.bar/j_spring_cas_security_check>
on other end see incomming request in log files apache2:
"post /j_spring_cas_security_check http/1.1" 200 5655 "-" "java/1.8.0_131"
Comments
Post a Comment