Foren

liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

rohit kotecha, geändert vor 11 Jahren.

liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

New Member Beiträge: 9 Beitrittsdatum: 23.03.13 Neueste Beiträge
Hi All,

I have implemented CAS in liferay and spring based web application.

single sign on is working fine vice versa.

but i m facing problem in single sign out.

when i logged out from liferay portal it will delete CASTGC from browser and invalidate session on cas server and if
i tried to access secure resource of spring web application it will automatically logout and redirect to cas login page.
so this is working fine.

but if i logged out from spring web application and tried to access secure resource of liferay,its allow to access that resource and
that is not desire.session remain active/valid in liferay.

CASTGC from browser gets deleted in both cases.

so please give me hint where is the problem.

here below is configuration i did.

i have attached web.xml file for liferay.

web.xml file for spring based web application.

<!--?xml version="1.0" encoding="UTF-8"?-->
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemalocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
                <display-name>Venice</display-name>
 
                <context-param>
        <param-name>log4jConfigLocation</param-name>
        <param-value>/WEB-INF/classes/log4j.properties</param-value>
    </context-param>
 
    <context-param>
        <param-name>webAppRootKey</param-name>
        <param-value>cas.root</param-value>
    </context-param>
 
    <filter>
       <filter-name>casSingleSignOutFilter</filter-name>
       <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
    </filter>
 
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
 
    <filter-mapping>
       <filter-name>CAS Single Sign Out Filter</filter-name>
       <url-pattern>/*</url-pattern>
    </filter-mapping>
 
    <filter-mapping>
      <filter-name>springSecurityFilterChain</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
 
    <!--
      - Loads the root application context of this web app at startup.
      - The application context is then available via
      - WebApplicationContextUtils.getWebApplicationContext(servletContext).
    -->
    <listener>
        <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
    </listener>
 
    <listener>
        <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>
    </listener>
 
    <error-page>
        <error-code>403</error-code>
        <location>/casfailed.jsp</location>
    </error-page>
 
                <listener>
                                <listener-class>
                                                org.springframework.web.context.ContextLoaderListener
                                </listener-class>
                </listener>
               
                <context-param>
                                <param-name>contextConfigLocation</param-name>
                                <param-value>
                                                /WEB-INF/applicationContext-domain-services.xml
                                                /WEB-INF/applicationContext-services.xml
                                                /WEB-INF/applicationContext-security.xml
                                                /WEB-INF/applicationContext-dao.xml
                                </param-value>
                </context-param>
               
                <filter>
                                <filter-name>springSecurityFilterChain</filter-name>
                                <filter-class>
                                                org.springframework.web.filter.DelegatingFilterProxy
                                </filter-class>
                </filter>
               
                <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
                                <url-pattern>/*</url-pattern>
                </filter-mapping>
   
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
                                <url-pattern>/j_spring_security_check</url-pattern>
                                <dispatcher>FORWARD</dispatcher>
                </filter-mapping>
   
    <filter>
        <filter-name>log4jMDCFilter</filter-name>
        <filter-class>com.nihilent.venice.web.filters.Log4jMDCFilter</filter-class>
        <!-- Provide all extentions in lowercase -->
         <init-param>
                                <param-name>excludeJS</param-name>
                                <param-value>js</param-value>
                </init-param>
                <init-param>
                               <param-name>excludeCSS</param-name>
                                <param-value>css</param-value>
                </init-param>
                <init-param>
                <param-name>excludeJPG</param-name>
                <param-value>jpg</param-value>
                </init-param>
                <init-param>
                <param-name>excludePNG</param-name>
                <param-value>png</param-value>
                </init-param>
                <init-param>
                <param-name>excludeGIF</param-name>
                <param-value>gif</param-value>
                </init-param>
    </filter>
 
    <filter-mapping>
        <filter-name>log4jMDCFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
   
   <servlet>
                                <servlet-name>veniceweb</servlet-name>
                                <servlet-class>
                                                org.springframework.web.servlet.DispatcherServlet
                                </servlet-class>
                                <load-on-startup>1</load-on-startup>
                </servlet>
               
                <servlet>
        <servlet-name>AxisServlet</servlet-name>
        <servlet-class>org.apache.axis2.transport.http.AxisServlet</servlet-class>
        <load-on-startup>3</load-on-startup>
   </servlet>
 
    <servlet>
                <description>
                </description>
                <display-name>FileUploadServlet</display-name>
                <servlet-name>FileUploadServlet</servlet-name>
                <servlet-class>com.nihilent.venice.webservice.FileUploadServlet</servlet-class>
    </servlet>
   
   <servlet-mapping>
    <servlet-name>AxisServlet</servlet-name>
    <url-pattern>/services/*</url-pattern>
   </servlet-mapping>
 
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.html</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.do</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.view</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.flow</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>FileUploadServlet</servlet-name>
                                <url-pattern>/FileUploadServlet</url-pattern>
                </servlet-mapping>
 
                <welcome-file-list>
                    <welcome-file>index.jsp</welcome-file>
                </welcome-file-list>
               
                <error-page>
                                <error-code>404</error-code>
                                <location>/WEB-INF/pages/404.jsp</location>
                </error-page>
                <error-page>
                                <exception-type>java.lang.Exception</exception-type>
                                <location>/WEB-INF/pages/404.jsp</location>
                </error-page>
               
</web-app>


applicationcontext-security xml file for spring based web application.

<!--?xml version="1.0" encoding="UTF-8"?-->
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security" xsi:schemalocation="http://www.springframework.org/schema/beans
                http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                http://www.springframework.org/schema/security
                http://www.springframework.org/schema/security/spring-security-3.0.xsd">
               
                <bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
                                <property name="locations">
                                                <list>
                                                                <value>
                                                                                /WEB-INF/classes/resources/applicationConfig-general.properties
                                                                </value>
                                                                <value>
                                                                                /WEB-INF/classes/resources/applicationConfig-env.properties
                                                                </value>
                                                </list>
                                </property>
                </bean>
 
                <security:http entry-point-ref="casEntryPoint" auto-config="true">
                                <security:intercept-url pattern="/**" access="ROLE_USER"></security:intercept-url>
                                <security:custom-filter position="CAS_FILTER" ref="casFilter" />
                                <security:custom-filter before="LOGOUT_FILTER" ref="requestSingleLogoutFilter" />
                                <security:custom-filter before="CAS_FILTER" ref="casSingleSignOutFilter" />
                                <security:custom-filter before="FORM_LOGIN_FILTER" ref="facebookAuthenticationFilter" />
                                <security:logout logout-success-url="http://localhost:8080/cas-server-webapp-3.3.5/logout" invalidate-session="false" />
                </security:http>
 
                <bean id="casFilter" class="org.springframework.security.cas.web.CasAuthenticationFilter">
                                <property name="authenticationManager" ref="authenticationManager" />
 
                </bean>
 
                <bean id="casEntryPoint" class="org.springframework.security.cas.web.CasAuthenticationEntryPoint">
                                <property name="loginUrl" value="http://localhost:8080/cas-server-webapp-3.3.5/login" />
                    <property name="serviceProperties" ref="serviceProperties" />
                </bean>
 
                <security:authentication-manager alias="authenticationManager">
                                <security:authentication-provider ref="casAuthenticationProvider" />
                </security:authentication-manager>
 
                <bean id="casAuthenticationProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider">
                                <property name="authenticationUserDetailsService">
                                                <bean class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
                                                                <constructor-arg ref="userDetailsService" />
                                                </bean>
                                </property>
                                <property name="serviceProperties" ref="serviceProperties" />
                                <property name="ticketValidator">
                                  <bean class="org.jasig.cas.client.validation.Cas20ServiceTicketValidator">
                                                <constructor-arg index="0" value="http://localhost:8080/cas-server-webapp-3.3.5" />
                                  </bean>
                                </property>
                                <property name="key" value="cas" />
                </bean>
               
                 <bean id="userDetailsService" class="com.nihilent.venice.web.security.authenticationProvider.UserDetailServiceImpl">
                                <property name="loginService" ref="loginService" />
    </bean>
 
                <bean id="serviceProperties" class="org.springframework.security.cas.ServiceProperties">
                                <property name="service" value="http://localhost:8080/Venice/j_spring_cas_security_check" />
                      <property name="sendRenew" value="false" />
                </bean>
 
                <bean id="facebookAuthenticationFilter" class="com.nihilent.venice.web.security.filter.VeniceFacebookAuthenticationFilter">
                                <property name="authenticationManager" ref="authenticationManager" />
                                <property name="authenticationSuccessHandler" ref="facebookAuthenticationSuccessHandler" />
                                <property name="authenticationFailureHandler" ref="authenticationFailureHandler"></property>
                </bean>
               
                <bean id="authenticationProviderFacebook" class="com.nihilent.venice.web.security.authenticationProvider.FacebookAuthenticationProvider">
                                <property name="roles" value="ROLE_FACEBOOK_USER" />
                </bean>
               
                <bean id="facebookAuthenticationSuccessHandler" class="com.nihilent.venice.web.security.handlers.VeniceFacebookAuthenticationSuccessHandler">
                                <property name="registrationService" ref="facebookRegistrationService" />
                                <property name="facebookHelper" ref="facebookHelper" />
                </bean>
               
                <bean id="facebookHelper" class="com.nihilent.venice.web.util.impl.FacebookHelperImpl" />
               
                <bean id="authenticationFailureHandler" class="com.nihilent.venice.web.security.handlers.VeniceAuthenticationFailureHandler" />
 
                <bean id="casSingleSignOutFilter" class="org.jasig.cas.client.session.SingleSignOutFilter">       
    </bean>
 
                <bean id="requestSingleLogoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter">
    <constructor-arg value="http://localhost:8080/cas-server-webapp-3.3.5/logout" />
    <constructor-arg>
      <bean class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" />
    </constructor-arg>
    <property name="filterProcessesUrl" value="http://localhost:8080/Venice/j_spring_cas_security_logout" />
  </bean>
               
</beans>


any help will be appreciated.

Thanks and Regards,
Rohit Kotecha
thumbnail
Apoorva Prakash, geändert vor 11 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

Liferay Master Beiträge: 658 Beitrittsdatum: 15.06.10 Neueste Beiträge
rohit kotecha:
Hi All,

I have implemented CAS in liferay and spring based web application.

single sign on is working fine vice versa.

but i m facing problem in single sign out.

when i logged out from liferay portal it will delete CASTGC from browser and invalidate session on cas server and if
i tried to access secure resource of spring web application it will automatically logout and redirect to cas login page.
so this is working fine.

but if i logged out from spring web application and tried to access secure resource of liferay,its allow to access that resource and
that is not desire.session remain active/valid in liferay.

CASTGC from browser gets deleted in both cases.

so please give me hint where is the problem.

here below is configuration i did.

i have attached web.xml file for liferay.

web.xml file for spring based web application.

<!--?xml version="1.0" encoding="UTF-8"?-->
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemalocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
                <display-name>Venice</display-name>
 
                <context-param>
        <param-name>log4jConfigLocation</param-name>
        <param-value>/WEB-INF/classes/log4j.properties</param-value>
    </context-param>
 
    <context-param>
        <param-name>webAppRootKey</param-name>
        <param-value>cas.root</param-value>
    </context-param>
 
    <filter>
       <filter-name>casSingleSignOutFilter</filter-name>
       <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
    </filter>
 
    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
 
    <filter-mapping>
       <filter-name>CAS Single Sign Out Filter</filter-name>
       <url-pattern>/*</url-pattern>
    </filter-mapping>
 
    <filter-mapping>
      <filter-name>springSecurityFilterChain</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
 
    <!--
      - Loads the root application context of this web app at startup.
      - The application context is then available via
      - WebApplicationContextUtils.getWebApplicationContext(servletContext).
    -->
    <listener>
        <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
    </listener>
 
    <listener>
        <listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>
    </listener>
 
    <error-page>
        <error-code>403</error-code>
        <location>/casfailed.jsp</location>
    </error-page>
 
                <listener>
                                <listener-class>
                                                org.springframework.web.context.ContextLoaderListener
                                </listener-class>
                </listener>
               
                <context-param>
                                <param-name>contextConfigLocation</param-name>
                                <param-value>
                                                /WEB-INF/applicationContext-domain-services.xml
                                                /WEB-INF/applicationContext-services.xml
                                                /WEB-INF/applicationContext-security.xml
                                                /WEB-INF/applicationContext-dao.xml
                                </param-value>
                </context-param>
               
                <filter>
                                <filter-name>springSecurityFilterChain</filter-name>
                                <filter-class>
                                                org.springframework.web.filter.DelegatingFilterProxy
                                </filter-class>
                </filter>
               
                <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
                                <url-pattern>/*</url-pattern>
                </filter-mapping>
   
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
                                <url-pattern>/j_spring_security_check</url-pattern>
                                <dispatcher>FORWARD</dispatcher>
                </filter-mapping>
   
    <filter>
        <filter-name>log4jMDCFilter</filter-name>
        <filter-class>com.nihilent.venice.web.filters.Log4jMDCFilter</filter-class>
        <!-- Provide all extentions in lowercase -->
         <init-param>
                                <param-name>excludeJS</param-name>
                                <param-value>js</param-value>
                </init-param>
                <init-param>
                               <param-name>excludeCSS</param-name>
                                <param-value>css</param-value>
                </init-param>
                <init-param>
                <param-name>excludeJPG</param-name>
                <param-value>jpg</param-value>
                </init-param>
                <init-param>
                <param-name>excludePNG</param-name>
                <param-value>png</param-value>
                </init-param>
                <init-param>
                <param-name>excludeGIF</param-name>
                <param-value>gif</param-value>
                </init-param>
    </filter>
 
    <filter-mapping>
        <filter-name>log4jMDCFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
   
   <servlet>
                                <servlet-name>veniceweb</servlet-name>
                                <servlet-class>
                                                org.springframework.web.servlet.DispatcherServlet
                                </servlet-class>
                                <load-on-startup>1</load-on-startup>
                </servlet>
               
                <servlet>
        <servlet-name>AxisServlet</servlet-name>
        <servlet-class>org.apache.axis2.transport.http.AxisServlet</servlet-class>
        <load-on-startup>3</load-on-startup>
   </servlet>
 
    <servlet>
                <description>
                </description>
                <display-name>FileUploadServlet</display-name>
                <servlet-name>FileUploadServlet</servlet-name>
                <servlet-class>com.nihilent.venice.webservice.FileUploadServlet</servlet-class>
    </servlet>
   
   <servlet-mapping>
    <servlet-name>AxisServlet</servlet-name>
    <url-pattern>/services/*</url-pattern>
   </servlet-mapping>
 
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.html</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.do</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.view</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>veniceweb</servlet-name>
                                <url-pattern>*.flow</url-pattern>
                </servlet-mapping>
                <servlet-mapping>
                                <servlet-name>FileUploadServlet</servlet-name>
                                <url-pattern>/FileUploadServlet</url-pattern>
                </servlet-mapping>
 
                <welcome-file-list>
                    <welcome-file>index.jsp</welcome-file>
                </welcome-file-list>
               
                <error-page>
                                <error-code>404</error-code>
                                <location>/WEB-INF/pages/404.jsp</location>
                </error-page>
                <error-page>
                                <exception-type>java.lang.Exception</exception-type>
                                <location>/WEB-INF/pages/404.jsp</location>
                </error-page>
               
</web-app>


applicationcontext-security xml file for spring based web application.

<!--?xml version="1.0" encoding="UTF-8"?-->
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security" xsi:schemalocation="http://www.springframework.org/schema/beans
                http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                http://www.springframework.org/schema/security
                http://www.springframework.org/schema/security/spring-security-3.0.xsd">
               
                <bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
                                <property name="locations">
                                                <list>
                                                                <value>
                                                                                /WEB-INF/classes/resources/applicationConfig-general.properties
                                                                </value>
                                                                <value>
                                                                                /WEB-INF/classes/resources/applicationConfig-env.properties
                                                                </value>
                                                </list>
                                </property>
                </bean>
 
                <security:http entry-point-ref="casEntryPoint" auto-config="true">
                                <security:intercept-url pattern="/**" access="ROLE_USER"></security:intercept-url>
                                <security:custom-filter position="CAS_FILTER" ref="casFilter" />
                                <security:custom-filter before="LOGOUT_FILTER" ref="requestSingleLogoutFilter" />
                                <security:custom-filter before="CAS_FILTER" ref="casSingleSignOutFilter" />
                                <security:custom-filter before="FORM_LOGIN_FILTER" ref="facebookAuthenticationFilter" />
                                <security:logout logout-success-url="http://localhost:8080/cas-server-webapp-3.3.5/logout" invalidate-session="false" />
                </security:http>
 
                <bean id="casFilter" class="org.springframework.security.cas.web.CasAuthenticationFilter">
                                <property name="authenticationManager" ref="authenticationManager" />
 
                </bean>
 
                <bean id="casEntryPoint" class="org.springframework.security.cas.web.CasAuthenticationEntryPoint">
                                <property name="loginUrl" value="http://localhost:8080/cas-server-webapp-3.3.5/login" />
                    <property name="serviceProperties" ref="serviceProperties" />
                </bean>
 
                <security:authentication-manager alias="authenticationManager">
                                <security:authentication-provider ref="casAuthenticationProvider" />
                </security:authentication-manager>
 
                <bean id="casAuthenticationProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider">
                                <property name="authenticationUserDetailsService">
                                                <bean class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
                                                                <constructor-arg ref="userDetailsService" />
                                                </bean>
                                </property>
                                <property name="serviceProperties" ref="serviceProperties" />
                                <property name="ticketValidator">
                                  <bean class="org.jasig.cas.client.validation.Cas20ServiceTicketValidator">
                                                <constructor-arg index="0" value="http://localhost:8080/cas-server-webapp-3.3.5" />
                                  </bean>
                                </property>
                                <property name="key" value="cas" />
                </bean>
               
                 <bean id="userDetailsService" class="com.nihilent.venice.web.security.authenticationProvider.UserDetailServiceImpl">
                                <property name="loginService" ref="loginService" />
    </bean>
 
                <bean id="serviceProperties" class="org.springframework.security.cas.ServiceProperties">
                                <property name="service" value="http://localhost:8080/Venice/j_spring_cas_security_check" />
                      <property name="sendRenew" value="false" />
                </bean>
 
                <bean id="facebookAuthenticationFilter" class="com.nihilent.venice.web.security.filter.VeniceFacebookAuthenticationFilter">
                                <property name="authenticationManager" ref="authenticationManager" />
                                <property name="authenticationSuccessHandler" ref="facebookAuthenticationSuccessHandler" />
                                <property name="authenticationFailureHandler" ref="authenticationFailureHandler"></property>
                </bean>
               
                <bean id="authenticationProviderFacebook" class="com.nihilent.venice.web.security.authenticationProvider.FacebookAuthenticationProvider">
                                <property name="roles" value="ROLE_FACEBOOK_USER" />
                </bean>
               
                <bean id="facebookAuthenticationSuccessHandler" class="com.nihilent.venice.web.security.handlers.VeniceFacebookAuthenticationSuccessHandler">
                                <property name="registrationService" ref="facebookRegistrationService" />
                                <property name="facebookHelper" ref="facebookHelper" />
                </bean>
               
                <bean id="facebookHelper" class="com.nihilent.venice.web.util.impl.FacebookHelperImpl" />
               
                <bean id="authenticationFailureHandler" class="com.nihilent.venice.web.security.handlers.VeniceAuthenticationFailureHandler" />
 
                <bean id="casSingleSignOutFilter" class="org.jasig.cas.client.session.SingleSignOutFilter">       
    </bean>
 
                <bean id="requestSingleLogoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter">
    <constructor-arg value="http://localhost:8080/cas-server-webapp-3.3.5/logout" />
    <constructor-arg>
      <bean class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" />
    </constructor-arg>
    <property name="filterProcessesUrl" value="http://localhost:8080/Venice/j_spring_cas_security_logout" />
  </bean>
               
</beans>


any help will be appreciated.

Thanks and Regards,
Rohit Kotecha


Hello Rohit,

Are you sure that you are making the following entries in web.xml
<filter>
<filter-name>CAS Single Sign Out Filter</filter-name>
<filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
</filter>
 

<filter-mapping>
<filter-name>CAS Single Sign Out Filter</filter-name>
<url-pattern>/c/portal/logout</url-pattern>
</filter-mapping>
 

<listener>
<listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
</listener>


HTH.

Thanks and Regards,
Apoorva Prakash
rohit kotecha, geändert vor 11 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

New Member Beiträge: 9 Beitrittsdatum: 23.03.13 Neueste Beiträge
Hi Apoorva prakash,

I made entry of singlesignout filter only for logout and not for login. aftr adding single sign out its working fine.

i need 1 more help.

there are 3 community in 1 portal instance. so after logout i want user to redirect to community which it came from.

currently logout url is : http://localhost:8888/cas-server-webapp-3.3.5/logout?service=http://localhost:9090/c/portal/login.

any hint on this.

Thanks and Regards,
Rohit Kotecha
thumbnail
Apoorva Prakash, geändert vor 11 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

Liferay Master Beiträge: 658 Beitrittsdatum: 15.06.10 Neueste Beiträge
Hello Rohit,

rohit kotecha:
Hi Apoorva prakash,

I made entry of singlesignout filter only for logout and not for login. aftr adding single sign out its working fine.


Thats great... emoticon

rohit kotecha:
i need 1 more help.

there are 3 community in 1 portal instance. so after logout i want user to redirect to community which it came from.

currently logout url is : http://localhost:8888/cas-server-webapp-3.3.5/logout?service=http://localhost:9090/c/portal/login.


If you need to redirect to certain page use the following property in portal-ext.properties
default.logout.page.path=


But if you want to redirect on different locations, you can create CustomLogoutPostAction class, and do redirections from there. See this link for approach.

HTH.

Thanks and Regards,
Apoorva Prakash
rohit kotecha, geändert vor 11 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

New Member Beiträge: 9 Beitrittsdatum: 23.03.13 Neueste Beiträge
Thanks for help Appoorva.

I am working on logout problem to redirect user back to home page from which it came from.

Thanks again.
thumbnail
Apoorva Prakash, geändert vor 11 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

Liferay Master Beiträge: 658 Beitrittsdatum: 15.06.10 Neueste Beiträge
rohit kotecha:
Thanks for help Appoorva.

I am working on logout problem to redirect user back to home page from which it came from.

Thanks again.


Welcome Rohit... emoticon
Riddhi Shah, geändert vor 9 Jahren.

RE: liferay 6 +CAS 3.3.5-sign out problem - session remain valid in liferay

New Member Beiträge: 24 Beitrittsdatum: 06.03.12 Neueste Beiträge
Hi Apoorva,

I am facing the same issue in Liferay EE 6.2 SP5 i.e. session remaining valid after SSO logout from another app.

I tried adding these three entries in liferay-web.xml but it is not working. Please help.

Regards.