[
https://jira.jboss.org/jira/browse/GTNPORTAL-996?page=com.atlassian.jira....
]
Sohil Shah commented on GTNPORTAL-996:
--------------------------------------
Usage Instructions:
For JOSSO:
Add the following to portal.war/WEB-INF/web.xml
<filter>
<filter-name>JOSSOLogoutFilter</filter-name>
<filter-class>org.gatein.sso.agent.filter.JOSSOLogoutFilter</filter-class>
<init-param>
<!-- This should point to your JOSSO authentication server -->
<param-name>LOGOUT_URL</param-name>
<param-value>http://localhost:8888/josso/signon/logout.do</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>JOSSOLogoutFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
For OpenSSO:
Add the following to portal.war/WEB-INF/web.xml
<filter>
<filter-name>OpenSSOLogoutFilter</filter-name>
<filter-class>org.gatein.sso.agent.filter.OpenSSOLogoutFilter</filter-class>
<init-param>
<!-- This should point to your OpenSSO authentication server -->
<param-name>LOGOUT_URL</param-name>
<param-value>http://localhost:8888/opensso/UI/Logout</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>OpenSSOLogoutFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
For CAS:
Nothing
GateIn+JOSSO integration: Problems with logout
----------------------------------------------
Key: GTNPORTAL-996
URL:
https://jira.jboss.org/jira/browse/GTNPORTAL-996
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.0.0-GA
Environment: GateIn-3.0.0-GA+JBoss 5.1 bundle (port 8080 for HTTP),
JOSSO-1.8.1+Tomcat 6.0.18 bundle (port 8888 for HTTP),
Reporter: Marek Posolda
After integrating GateIn portal with JOSSO, I did these steps:
- Click to "Sign in" in GateIn
- Login as root in JOSSO console
- Logout in GateIn
- Click to "Sign in" link again. Now I am directly authenticated to GateIn
which is not correct to me because now I am not able to login as different user in this
web session.
Problem is that JOSSO cookie is not cleared from browser when doing logout from GateIn. I
am able to login as different user after clearing the cookie directly from web browser via
browser cookie manager.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira