Re: [Hypercontent-users] HC logout issue

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

On Nov 13, 2006, at 12:44 AM, tom tom wrote:

> Hi,
> Thanks for the reply.
> As both uPortal and HC govern by one cas ticket, I
> thought calling cas logout via uPortal logout would
> invalidate that ticket so that it will not be valid
> for HC (currently the HC link in uPortal does not have
> (command=Login or mode=login), anyhow I will read more
> on that.

You are right that the authentication ticket is no longer valid, but  
you must not confuse authentication with session management.  CAS is  
the authentication provider for uPortal and HyperContent, but all  
three have their own session management.  Once authenticated, CAS is  
no longer consulted to verify that a user's session with uPortal or  
HC is still valid.  The solution to this, "Single Sign-off", would be  
for CAS, when a user logs out, to notify all the applications the  
user has logged into.  Only then could each and every application  
close its session for that individual.   This does not exist, but I  
have seen discussion on the CAS list about it.

>
>
> I cant see any error, I did look into catalina.out and
> cant find any errors it is just that HC redirect to
> the CAS logout page(when I click logout in HC) but
> realy not doing a CAS logout. Is there a HC log file
> which I can see.

The HC log file is called hypercontent.log, you can control its  
location in log4j.properties.  The "service" parameter you pass to  
CAS is supposed to redirect from the CAS logout to the URL specified  
by "service", which should point to HyperContent's logout function.   
This in turn may redirect you to the CAS login screen if the HC page  
doesn't allow group:anybody to read.

>
>
> In addition to above I would like to know the
> following,
> because of the WebProxy limitation (to have no head
> elements as uPortal renders it) How can we have a css
> in Hypercontent and view the contents and ignore it
> when publishing it. Reason for this is uPortal got the
> css for the WebProxy but still authors would like to
> see the styles within HC. Current project definition
> which I got is very primitive and we only want to work
> on htmls at the moment without any of the xml and xsl
> stuff.

This is another reason to consider the HyperContent portlet, which  
will automatically strip out the <head> tag and all its contents, so  
you can safely add the CSS in the head tag without polluting the  
portal.  I have a bunch of changes to check in on the portlet later  
this week, having added directory browsing and menus for adding files  
and tracking open files, and copying, deleting or moving files.

>
> see my project definition below for further details.
>
>
> <cms-project>
> <build
> base-url="http://localhost:8080/hypercontent/my-project/build/">

--> it is not necessary to specify "base-url" if you want it to point  
to the built in HC web server, as you are doing here.  Specify this  
only if you want to point to an external web server.

> <filesystem-def name="Project build" type="local">
> <argument index="0"
> value="/home/xxx/installations/buildHypercontent/"/>
> </filesystem-def>
> </build>
>
> <publish
> base-url="http://localhost:8080/hypercontent/my-project/publish/">

--> see above

> <filesystem-def name="Project publish" type="local">
> <argument index="0"
> value="/home/xxx/installations/publishHypercontent/"/>
> </filesystem-def>
> </publish>
>
> <resource-directory create="manual" label="Html File"
> path="/**/*.html" publish="true">
> <content type="text/html"/>
> </resource-directory>
>
> <resource-directory create="manual" label="Image"
> path="/**/*.jpg" publish="true">
> <content type="image/jpeg"/>
> </resource-directory>
> </cms-project

Otherwise this looks fine, I would just encourage you to move towards  
XML files with XSL transformations to generate your markup. That will  
make it easier to automate things like CSS links.

Cheers,
	Alex

>
>
>
>
> --- Alex Vigdor <al...@bi...> wrote:
>
>>
>> On Nov 12, 2006, at 5:43 PM, tom tom wrote:
>>
>>> Hi,
>>>
>>> I observed the following behaviour (defect ?) in
>> HC
>>> while doing the following.
>>>
>>>
>>> HC is casified and working fine with CAS and
>> uPortal.
>>> Users login to uPortal via CAS and one of uPortal
>>> channel got a link to HC. Look at the following
>> use
>>> case.
>>>
>>> 1) user 'AUTHOR_HC' login to uPortal via
>>> CAS.(authentication is successful)
>>>
>>> 2)clicks HC link to edit content
>>>
>>> 3)HC opens in a new window with 'You are logged in
>> as
>>> AUTHOR_HC'
>>>
>>> 4) user edits contents and saves
>>>
>>> 5) closes the HC browser window (wihout pressing
>>> logout link in HC).
>>>
>>> 6) user presses uPortal logout which in turn call
>> the
>>> cas/logout
>>>
>>> 7) Different user login to uPortal via CAS as
>> user
>>> 'APPOVER_HC'
>>>
>>> 8) click the HC link in uPortal, HC opens in a new
>>> browser Window ..............
>>
>> This is the expected behavior.  Logging out of
>> uPortal and CAS does
>> NOT terminate the browser's session with
>> HyperContent.  The user must
>> close all browser windows for the session cookies to
>> be cleared.
>> This should be clearly conveyed to the user.  Single
>> Sign Out, the
>> ability for the user to log out of CAS and all
>> applications that use
>> CAS for login, is a planned feature for a future CAS
>> release.
>>
>>>
>>>
>>> But still it shows the previous users welcome
>> message
>>> which is 'You are logged in as AUTHOR_HC'
>>>
>>> Why doesnt the HC cleans out everything. Is this a
>>> limitation?
>>> Different users can use the same workstation in
>> our
>>> case.
>>>
>>>
>>> Instead of above step 5,if the user presses the
>> logout
>>> in HC still problem remains the same. It does not
>>> cleans out the users state.
>>
>> Check the log for errors.  What screen does the user
>> see after they
>> click logout in HC?
>>
>> Cheers,
>> Alex
>>
>>
>>
> ---------------------------------------------------------------------- 
> ---
>> Using Tomcat but need to do more? Need to support
>> web services, security?
>> Get stuff done quickly with pre-integrated
>> technology to make your job easier
>> Download IBM WebSphere Application Server v.1.0.1
>> based on Apache Geronimo
>>
> http://sel.as-us.falkag.net/sel? 
> cmd=lnk&kid=120709&bid=263057&dat=121642
>> _______________________________________________
>> Hypercontent-users mailing list
>> Hyp...@li...
>>
> https://lists.sourceforge.net/lists/listinfo/hypercontent-users
>>
>
>
>
>
> ______________________________________________________________________ 
> ______________
> Do you Yahoo!?
> Everyone is raving about the all-new Yahoo! Mail beta.
> http://new.mail.yahoo.com
>