LogoutRequest not fulfilled by IdP

[vyal2k]

How can i request IdP to return LDAP common name (which is what the user enters in login page) in the Assertion upon successful authentication so that i can use the same in Logout Request.
Also what should be the NameId Format for LDAP common name?

Thanks,
Vasu 


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Tuesday, 26 November 2013 10:28 PM
Subject: Re: LogoutRequest not fulfilled by IdP
 

On 11/26/13, 11:45 AM, "vyal2k" <vyal2k at yahoo.com> wrote:

>IdP does have the session for the user identified by NameId; when the SP
>issues AuthnRequest immediately following the failed LogoutRequest, the
>IdP logs says "Existing IdP session available for principal user2".

A session based on a cookie is implicit, it's not the same as being able
to lookup the session by NameID. You asked what the problem was, I told
you. The code path there is direct, it searches for the session by NameID
and doesn't find one.


-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131126/7e81dfd4/attachment.html