Re: [Hypercontent-users] HC logout issue

[Alex V. <al...@bi...>]

On Nov 12, 2006, at 5:43 PM, tom tom wrote:

> Hi,
>
> I observed the following behaviour (defect ?) in HC
> while doing the following.
>
>
> HC is casified and working fine with CAS and uPortal.
> Users login to uPortal via CAS and one of uPortal
> channel got a link to HC. Look at the following use
> case.
>
> 1) user 'AUTHOR_HC' login to uPortal via
> CAS.(authentication is successful)
>
> 2)clicks HC link to edit content
>
> 3)HC opens in a new window with 'You are logged in as
> AUTHOR_HC'
>
> 4) user edits contents and saves
>
> 5) closes the HC browser window (wihout pressing
> logout link in HC).
>
> 6) user presses uPortal logout which in turn call the
> cas/logout
>
> 7) Different user login to uPortal via CAS as  user
> 'APPOVER_HC'
>
> 8) click the HC link in uPortal, HC opens in a new
> browser Window ..............

This is the expected behavior.  Logging out of uPortal and CAS does  
NOT terminate the browser's session with HyperContent.  The user must  
close all browser windows for the session cookies to be cleared.   
This should be clearly conveyed to the user.  Single Sign Out, the  
ability for the user to log out of CAS and all applications that use  
CAS for login, is a planned feature for a future CAS release.

>
>
> But still it shows the previous users welcome message
> which is 'You are logged in as AUTHOR_HC'
>
> Why doesnt the HC cleans out everything. Is this a
> limitation?
> Different users can use the same workstation in our
> case.
>
>
> Instead of above step 5,if the user presses the logout
> in HC still problem remains the same. It does not
> cleans out the users state.

Check the log for errors.  What screen does the user see after they  
click logout in HC?

Cheers,
Alex