Question related to "Local Logout" provided by Shibboleth IdP 2.4.0

[Yaowen Tu]

Can you tell me more about "So you have some other localized problem
involved".

With the same code, if user login to one browser and logout directly, it
work in both persisten id and transient id

As soon as user try to login to two browsers, the second browser cannot
login.

The log says:
15:09:54.109 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:259]
- Querying SessionManager based on NameID
'_da8df6f6b68fdbdb75279cba7bae37b4|urn:oasis:names:tc:SAML:2.0:nameid-format:transient|https:/XXXXXXXXX'
15:09:54.109 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:296]
- LogoutRequest referenced a session other than the client's current one.

I assume that's the expected behavior with current Shibboleth IdP. It is
not a problem from SP side, is it?

Thanks,
Yaowen

Yaowen


On Fri, Aug 30, 2013 at 3:47 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/30/13 6:25 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
>
> >I just tried single logout with transient id, looks like it doesn't work
> >either, and same behavior as with persistent id.
>
> I don't know what that behavior is, but two different browsers with a
> transient ID mean absolutely no connection between the two sessions. So
> it's as much as saying the code doesn't work at all, because it wouldn't
> matter whether you added a second login or not. So you have some other
> localized problem involved, I would say.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130830/d4866339/attachment.html